Lash Group
Disclosed Feb 21, 20242 years ago15,196 affectedConfirmed
What is known
| People affected | 15,196 (as reported to HHS) |
|---|---|
| Disclosed | Feb 21, 2024 |
| Discovered | Apr 10, 2024 |
| Happened | Feb 21, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Lash Groupjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-06-07 The Lash Group Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Lash Groupin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Lash Group (Business Associate, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 21, 2024 | 278,596 |
| Oregon DOJresidents of OR | May 17, 2024 | 2,916,417 |
| Oregon DOJresidents of OR | May 20, 2024 | 102,520 |
| Oregon DOJresidents of OR | May 21, 2024 | 272,433 |
| Oregon DOJresidents of OR | May 22, 2024 | |
| Oregon DOJresidents of OR | May 22, 2024 | |
| Oregon DOJresidents of OR | May 23, 2024 | 36,040 |
| Oregon DOJresidents of OR | May 24, 2024 | 747,585 |
| Oregon DOJresidents of OR | May 28, 2024 | |
| Oregon DOJresidents of OR | May 30, 2024 | 1,742,019 |
| Oregon DOJresidents of OR | May 30, 2024 | |
| Oregon DOJresidents of OR | May 31, 2024 | |
| Oregon DOJresidents of OR | Jun 7, 2024 | |
| Vermont AGresidents of VT | Jun 7, 2024 | |
| Indiana AGresidents of IN | Jun 11, 2024 | 21 |
| HHS archivetotal | Jun 21, 2024 | 15,196 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 15196 · backfill source
- 2026-09-25 · disclosed: 2024-05-17 to 2024-02-21 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-06-07-lash-group-data-breach-notice-consumers · backfill source
- 2026-09-25 · disclosed: 2024-05-20 to 2024-05-17 · backfill source
- 2026-09-25 · disclosed: 2024-05-21 to 2024-05-20 · backfill source
- 2026-09-25 · disclosed: 2024-05-22 to 2024-05-21 · backfill source
- 2026-09-25 · disclosed: 2024-05-23 to 2024-05-22 · backfill source
- 2026-09-25 · disclosed: 2024-05-24 to 2024-05-23 · backfill source
- 2026-09-25 · disclosed: 2024-05-28 to 2024-05-24 · backfill source
- 2026-09-25 · disclosed: 2024-05-30 to 2024-05-28 · backfill source
- 2026-09-25 · disclosed: 2024-05-31 to 2024-05-30 · backfill source
- 2026-09-25 · disclosed: 2024-06-07 to 2024-05-31 · backfill source
- 2026-09-25 · discovered: empty to 2024-04-10 · backfill source
- 2026-09-25 · occurred: empty to 2024-02-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.