Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

MEDNAX Services

Disclosed Dec 16, 20201,442,997 affectedConfirmed

Official notice

The covered entity (CE), Pediatrix Medical Group, formerly known as MEDNAX Services, reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 1,442,997 individuals. The PHI involved includes names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, health insurance information, claims and financial information, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards, and retrained its staff on email security.

What is known

People affected1,442,997 (as reported to HHS)
DisclosedDec 16, 2020
DiscoveredJun 19, 2020
HappenedJul 2, 2020
AttackPhishing
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: MEDNAX Services
Official noticeatg.wa.gov
Washington Attorney General breach notice: MEDNAX Services
Official noticejustice.oregon.gov
Oregon DOJ breach notice: MEDNAX Services
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): MEDNAX Services (Business Associate, FL)

Notices filed

Residents of CADec 16, 2020
California AGCount not stated
Residents of WADec 16, 2020
Washington AG29,861 people
Residents of ORDec 16, 2020
Oregon DOJ2,411 people
TotalDec 16, 2020
HHS archive1,442,997 people
Residents of CADec 23, 2020
California AGCount not stated
History of this record
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 1442997by backfillSource
summary2026-09-25
empty to The covered entity (CE), Pediatrix Medical Group, formerly known as MEDNAX Services, reported that multiple employees were victims of an email phishing attack affecting the protected health information (PHI) of 1,442,997 individuals. The PHby backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to phishingby backfillSource
discovered2026-09-25
empty to 2020-06-19by backfillSource
disclosed2026-09-25
2020-12-23 to 2020-12-16by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about MEDNAX Services