OneDigital
Disclosed Jan 24, 20224 years ago800 affectedConfirmed
The business associate (BA), OneDigital, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 800 individuals. The PHI involved included names, addresses, dates of birth, and Social Security numbers. The BA notified HHS, affected individuals, and posted substitute notice on its website. In response to the breach, the BA implemented additional administrative and technical safeguards and provided complimentary credit monitoring services to affected individuals.
What is known
| People affected | 800 (as reported to HHS) |
|---|---|
| Disclosed | Jan 24, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): OneDigital (Business Associate, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 24, 2022 | 800 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.