Merritt Healthcare Advisors

Disclosed Mar 15, 202388,740 affectedConfirmed

Merritt Healthcare Advisors reported that an employee was the victim of an email phishing scheme affecting the protected health information (PHI) of 88,740 individuals. Upon investigation, it was determined that the entity is not a covered entity or business associate; OCR closed the matter.

What is known

People affected	88,740 (as reported to HHS)
Disclosed	Mar 15, 2023
Happened	Jul 30, 2022
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Merritt Healthcare Advisors

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Merritt Healthcare Advisors (Business Associate, CT)

Notices filed

TotalMar 15, 2023

HHS archive88,740 people

Residents of CAMar 20, 2023

California AGCount not stated

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 88740by backfillSource

disclosed2026-09-25

2023-03-20 to 2023-03-15by backfillSource

summary2026-09-25

empty to Merritt Healthcare Advisors reported that an employee was the victim of an email phishing scheme affecting the protected health information (PHI) of 88,740 individuals. Upon investigation, it was determined that the entity is not a covered by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Merritt Healthcare Advisors