NYSARC Columbia County Chapter
Disclosed Aug 29, 20224 years ago5,701 affectedConfirmed
NYSARC Columbia County Chapter dba COARC, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 5,701 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and diagnoses. The CE notified HHS, affected individuals, the media, law enforcement officials, and provided substitute notice on its website. In its mitigation efforts, the CE deployed additional administrative, technical, and security safeguards. Staff were retrained.
What is known
| People affected | 5,701 (as reported to HHS) |
|---|---|
| Disclosed | Aug 29, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Government · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2023-04-26 NYSARC Columbia County Chapter Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): NYSARC Columbia County Chapter (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 29, 2022 | 5,701 |
| Vermont AGresidents of VT | Apr 26, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 5701 · backfill source
- 2026-09-25 · disclosed: 2023-04-26 to 2022-08-29 · backfill source
- 2026-09-25 · summary: empty to NYSARC Columbia County Chapter dba COARC, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 5,701 individuals. The PHI involved included names, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.