NuLife Med
Disclosed May 9, 20224 years ago92,436 affectedConfirmed
The covered entity (CE), NuLife Med, LLC reported that its business associate (BA) was the subject of a data breach that affected the protected health information (PHI) of 3,805 individuals. The PHI involved included demographic, financial, and treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In its mitigation efforts, the CE and BA implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 92,436 (as reported to HHS) |
|---|---|
| Disclosed | May 9, 2022 |
| Happened | Mar 9, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2022 12 19 NuLife Med Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: NuLife Medin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): NuLife Med (Business Associate, NH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | May 9, 2022 | 92,436 |
| HHS archivetotal | Jul 25, 2022 | 3,805 |
| Vermont AGresidents of VT | Dec 19, 2022 | |
| Indiana AGresidents of IN | Dec 19, 2022 | 12 |
History of this record
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 29453 to 92436 · backfill source
- 2026-09-25 · disclosed: 2022-07-25 to 2022-05-09 · backfill source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2022-12-19 to 2022-07-25 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), NuLife Med, LLC reported that its business associate (BA) was the subject of a data breach that affected the protected health information (PHI) of 3,805 individuals. The PHI involved included demographic, financial, · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 29453 · backfill source
- 2026-09-25 · occurred: empty to 2022-03-09 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.