Merritt Healthcare Advisors
Disclosed Mar 15, 20233 years ago88,740 affectedConfirmed
Merritt Healthcare Advisors reported that an employee was the victim of an email phishing scheme affecting the protected health information (PHI) of 88,740 individuals. Upon investigation, it was determined that the entity is not a covered entity or business associate; OCR closed the matter.
What is known
| People affected | 88,740 (as reported to HHS) |
|---|---|
| Disclosed | Mar 15, 2023 |
| Happened | Jul 30, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Merritt Healthcare Advisorsoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Merritt Healthcare Advisors (Business Associate, CT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 15, 2023 | 88,740 |
| California AGresidents of CA | Mar 20, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 88740 · backfill source
- 2026-09-25 · disclosed: 2023-03-20 to 2023-03-15 · backfill source
- 2026-09-25 · summary: empty to Merritt Healthcare Advisors reported that an employee was the victim of an email phishing scheme affecting the protected health information (PHI) of 88,740 individuals. Upon investigation, it was determined that the entity is not a covered · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.