Every public data breach

44 disclosed this week · 26,355 on record

Medsurant Holdings

Disclosed Nov 29, 2021129,127 affectedConfirmed

Official notice

The covered entity (CE), Medsurant Holdings, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 129,127 individuals. The PHI involved included names, address, dates of birth, drivers’ license and Social Security numbers, claims and financial information, and diagnoses. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional administrative, technical, and physical safeguards to better protect its PHI.

What is known

People affected129,127 (as reported to HHS)
DisclosedNov 29, 2021
HappenedSep 23, 2021
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
127127 to 129127by backfillSource
disclosed2026-09-25
2022-03-25 to 2021-11-29by backfillSource
summary2026-09-25
empty to The covered entity (CE), Medsurant Holdings, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 129,127 individuals. The PHI involved included names, address, dates of birth, drivers’ liceby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 127127by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Medsurant Holdings