Monument
Disclosed Mar 31, 20233 years ago108,584 affectedConfirmed
Monument, the business associate (BA) reported that it disclosed the protected health information (PHI) of 108,584 individuals to third party tracking technologies, including, but not limited to, Meta, Google, Bing, and Pinterest. Monument notified HHS, the affected individuals, and the media. In response to the breach, the BA removed all third-party tracking technologies from its online platforms.
What is known
| People affected | 108,584 (as reported to HHS) |
|---|---|
| Disclosed | Mar 31, 2023 |
| Discovered | Feb 6, 2023 |
| Happened | Nov 1, 2017 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Monumentoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Monumentjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Monument (Business Associate, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 31, 2023 | |
| Oregon DOJresidents of OR | Mar 31, 2023 | 108,584 |
| HHS archivetotal | Mar 31, 2023 | 108,584 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 108584 · backfill source
- 2026-09-25 · summary: empty to Monument, the business associate (BA) reported that it disclosed the protected health information (PHI) of 108,584 individuals to third party tracking technologies, including, but not limited to, Meta, Google, Bing, and Pinterest. Monument · backfill source
- 2026-09-25 · discovered: empty to 2023-02-06 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.