Maternal and Family Health Services
Disclosed Aug 8, 20224 years ago461,070 affectedConfirmed
The covered entity (CE) Maternal and Family Health Services, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 461,070 individuals. The PHI involved included names, addresses, dates of birth, social security and drivers’ license numbers, claims and financial information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS and the affected individuals. In its mitigation efforts, the CE implemented additional administrative and technical safeguards. Staff were retrained to properly protect and secure PHI.
What is known
| People affected | 461,070 (as reported by the organization) |
|---|---|
| Disclosed | Aug 8, 2022 |
| Discovered | Apr 4, 2022 |
| Happened | Aug 21, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Maternal and Family Health Servicesoag.ca.gov · Official notice | Official notice |
| Notice letter filed with the Delaware DOJ: Maternal and Family Health Servicesattorneygeneral.delaware.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Maternal and Family Health Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Maternal and Family Health Services (Healthcare Provider, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 8, 2022 | 461,070 |
| Delaware DOJresidents of DE | Jan 3, 2023 | 808 |
| Indiana AGresidents of IN | Jan 3, 2023 | 153 |
| California AGresidents of CA | Jan 10, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2023-01-03 to 2022-08-08 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE) Maternal and Family Health Services, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 461,070 individuals. The PHI involved included names, addresses, dates of · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 461070 · backfill source
- 2026-09-25 · data_types: [] to ["names"] · backfill source
- 2026-09-25 · disclosed: 2023-01-10 to 2023-01-03 · backfill source
- 2026-09-25 · discovered: empty to 2022-04-04 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.