Onsite Mammography
Disclosed Apr 21, 20251 year ago357,265 affectedConfirmed
Onsite Mammography, the covered entity (CE), reported that an employee was the target of an email phishing scheme that impacted the protected health information (PHI) of 357,265 individuals. The PHI involved demographic and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional administrative and technical safeguards.
What is known
| People affected | 357,265 (as reported by the organization) |
|---|---|
| Disclosed | Apr 21, 2025 |
| Happened | Oct 2, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-04-21 Onsite Mammography Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Onsite Mammographyin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Onsite Mammography (Business Associate, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Apr 21, 2025 | |
| Indiana AGresidents of IN | Apr 21, 2025 | 6,529 |
| HHS archivetotal | Apr 21, 2025 | 357,265 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Onsite Mammography, the covered entity (CE), reported that an employee was the target of an email phishing scheme that impacted the protected health information (PHI) of 357,265 individuals. The PHI involved demographic and treatment inform · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 357265 · backfill source
- 2026-09-25 · occurred: empty to 2024-10-02 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.