Lucent Health Solutions
Disclosed Jan 30, 20251 year ago37,000 affectedConfirmed
The covered entity (CE), Lucent Health Solutions, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 37,000 individuals. The PHI involved included names, address, dates of birth, drivers’ license and Social Security numbers, claims information, diagnoses, and conditions. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented multi-factor authentication across all users, retrained workforce members, and implemented new technical and physical safeguards.
What is known
| People affected | 37,000 (as reported to HHS) |
|---|---|
| Disclosed | Jan 30, 2025 |
| Happened | Oct 2, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Lucent Health Solutionsoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Lucent Health Solutionsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Lucent Health Solutions (Business Associate, TN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jan 30, 2025 | |
| Indiana AGresidents of IN | Jan 30, 2025 | 31 |
| HHS archivetotal | Jan 30, 2025 | 37,000 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 7529 to 37000 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Lucent Health Solutions, reported that an employee was the subject of an email phishing attack that affected the protected health information (PHI) of 37,000 individuals. The PHI involved included names, address, da · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 7529 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.