Northern Light Health

Disclosed Aug 3, 2020304,399 affectedConfirmed

The covered entity (CE), Northern Light Health, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 304,399 individuals. The ePHI involved included names, addresses, and dates of birth. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected	304,399 (as reported to HHS)
Disclosed	Aug 3, 2020
Happened	May 14, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Northern Light Health

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Northern Light Health (Business Associate, ME)

Notices filed

TotalAug 3, 2020

HHS archive304,399 people

Residents of CASep 14, 2020

California AGCount not stated

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 304399by backfillSource

disclosed2026-09-25

2020-09-14 to 2020-08-03by backfillSource

summary2026-09-25

empty to The covered entity (CE), Northern Light Health, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 304,399 individuals. The ePHI involved includby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Northern Light Health