NextGen Healthcare

Disclosed Apr 27, 20231,050,000 affectedConfirmed

Stolen credentials used to access NextGen Office data of 1.05 million patients

Electronic health record vendor NextGen Healthcare said attackers used client credentials that appeared to have been stolen elsewhere to access its NextGen Office system between March 29 and April 14, 2023. Names, dates of birth, addresses and Social Security numbers of about 1.05 million patients were taken.

What is known

People affected	1,050,000 (as reported by the organization)
Disclosed	Apr 27, 2023
Discovered	Mar 30, 2023
Happened	Mar 29, 2023
Attack	Hacking
Data exposed	NamesDates of birthAddressesSocial Security numbers
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: NextGen Healthcare

Official noticeatg.wa.gov

Washington Attorney General breach notice: NextGen Healthcare

Official noticeattorneygeneral.delaware.gov

Notice letter filed with the Delaware DOJ: NextGen Healthcare

Official noticejustice.oregon.gov

Oregon DOJ breach notice: NextGen Healthcare

Regulatoroag.ca.gov

California AG data breach notice: NextGen Healthcare, Inc.

Newstechcrunch.com

NextGen Healthcare says hackers accessed personal data of more than 1 million patients

Official noticeago.vermont.gov

Vermont Attorney General: 2023-04-27 NextGen Healthcare Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2023 data breach report: NextGen Healthcare

Notices filed

Residents of VTApr 27, 2023

Vermont AGCount not stated

Residents of DEApr 28, 2023

Delaware DOJ5,142 people

Residents of INApr 28, 2023

Indiana AG17,001 people

Residents of DEApr 28, 2023

Delaware DOJ5,142 people

Residents of WAMay 3, 2023

Washington AG21,981 people

Residents of ORMay 4, 2023

Oregon DOJ1,049,375 people

Residents of CAMay 5, 2023

California AGCount not stated

TotalMay 5, 2023

Research1,050,000 people

History of this record

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/D-BYear-to-Date-Report-2023.pdfby backfillSource

disclosed2026-09-25

2023-04-28 to 2023-04-27by backfillSource

data_types2026-09-25

["names"] to ["names","dob","addresses","ssn"]by seedSource

records_basis2026-09-25

empty to organizationby seedSource

records2026-09-25

empty to 1050000by seedSource

summary2026-09-25

empty to Electronic health record vendor NextGen Healthcare said attackers used client credentials that appeared to have been stolen elsewhere to access its NextGen Office system between March 29 and April 14, 2023. Names, dates of birth, addresses by seedSource

title2026-09-25

empty to Stolen credentials used to access NextGen Office data of 1.05 million patientsby seedSource

data_types2026-09-25

[] to ["names"]by backfillSource

disclosed2026-09-25

2023-05-03 to 2023-04-28by backfillSource

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2023-05-05 to 2023-05-03by backfillSource

discovered2026-09-25

empty to 2023-03-30by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about NextGen Healthcare