Skip to content

MedMinder Systems

Disclosed Sep 1, 20233 years ago12,146 affectedConfirmed

Official notice

The covered entity (CE), MedMinder Systems, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 12,146 individuals. The PHI involved included dates of birth and medications. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring services and implemented additional administrative, technical, and security safeguards. The CE retrained its staff on the requirement to protect and secure PHI.

What is known

People affected12,146 (as reported to HHS)
DisclosedSep 1, 2023
DiscoveredFeb 21, 2023
HappenedFeb 7, 2023
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
Washington Attorney General breach notice: MedMinder Systemsatg.wa.gov · Official notice
HHS OCR breach report (archive, resolved): MedMinder Systems (Healthcare Provider, MA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalSep 1, 202312,146
Washington AGresidents of WASep 7, 20231,252
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 12146 · backfill source
  • 2026-09-25 · disclosed: 2023-09-07 to 2023-09-01 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), MedMinder Systems, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 12,146 individuals. The PHI involved included dates of birth and medications. The CE notified · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.

Everything about MedMinder Systems

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.