mscripts
Disclosed Jan 17, 20233 years ago88,923 affectedConfirmed
The business associate (BA), mscripts, reported that a cloud storage asset lacked appropriate security safeguards that could have allowed the unauthorized access to the protected health information (PHI) of 88,923individuals. The PHI involved included names, dates of birth, addresses, medication information, and health insurance information. The BA notified HHS, affected individuals, and the media. The BA strengthened its technical and security safeguards to better protect its sensitive data. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 88,923 (as reported to HHS) |
|---|---|
| Disclosed | Jan 17, 2023 |
| Discovered | Nov 18, 2022 |
| Happened | Sep 30, 2016 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: mscriptsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: mscriptsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: mscriptsjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): mscripts® (Business Associate, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 17, 2023 | 88,923 |
| California AGresidents of CA | Mar 14, 2023 | |
| Washington AGresidents of WA | Mar 14, 2023 | 1,394 |
| Oregon DOJresidents of OR | Mar 14, 2023 | 5,725 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 88923 · backfill source
- 2026-09-25 · disclosed: 2023-03-14 to 2023-01-17 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), mscripts, reported that a cloud storage asset lacked appropriate security safeguards that could have allowed the unauthorized access to the protected health information (PHI) of 88,923individuals. The PHI involv · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · discovered: empty to 2022-11-18 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.