LivaNova USA
Disclosed Apr 26, 20242 years ago129,031 affectedConfirmed
The business associate (BA), LivaNova USA, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 129,031 individuals. The PHI involved included names, addresses, dates of birth, social security numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The BA notified HHS and affected covered entities. In response to the breach, the BA implemented additional administrative, technical, and security safeguards. OCR provided technical assistance to the BA The HIPAA Security Rule.
What is known
| People affected | 129,031 (as reported to HHS) |
|---|---|
| Disclosed | Apr 26, 2024 |
| Discovered | Nov 19, 2023 |
| Happened | Oct 26, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: LivaNova USAoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: LivaNova USAatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: LivaNova USAjustice.oregon.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-05-31 LivaNova USA Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: LivaNova USAin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): LivaNova USA (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 26, 2024 | 129,031 |
| Vermont AGresidents of VT | May 31, 2024 | |
| Indiana AGresidents of IN | May 31, 2024 | 3 |
| California AGresidents of CA | Jun 21, 2024 | |
| Washington AGresidents of WA | Jun 21, 2024 | 2,116 |
| Oregon DOJresidents of OR | Jun 21, 2024 | 129,219 |
| California AGresidents of CA | Jul 30, 2024 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 188 to 129031 · backfill source
- 2026-09-25 · disclosed: 2024-05-31 to 2024-04-26 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), LivaNova USA, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 129,031 individuals. The PHI involved included names, addresses, dates of birth, social se · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 188 · backfill source
- 2026-09-25 · disclosed: 2024-06-21 to 2024-05-31 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-11-19 · backfill source
- 2026-09-25 · disclosed: 2024-07-30 to 2024-06-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.