NCP Healthcare Management

Disclosed Jul 17, 202078,070 affectedConfirmed

The business associate (BA), NCP Healthcare Management Company, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 78,070 individuals. The ePHI involved included names, dates of birth, Social Security numbers, drivers’ license numbers, financial and clinical information, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. As a result of the incident, the BA implemented additional administrative, technical, and security safeguards to better protect its ePHI.

What is known

People affected	78,070 (as reported to HHS)
Disclosed	Jul 17, 2020
Happened	Apr 27, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: NCP Healthcare Management

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): NCP Healthcare Management (Business Associate, MA)

Notices filed

Residents of CAJul 17, 2020

California AGCount not stated

TotalJul 17, 2020

HHS archive78,070 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 78070by backfillSource

summary2026-09-25

empty to The business associate (BA), NCP Healthcare Management Company, reported that an employee was the victim of an email phishing scheme that affected the electronic protected health information (ePHI) of 78,070 individuals. The ePHI involved iby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about NCP Healthcare Management