Orsini Pharmaceutical Services
Disclosed Mar 8, 20242 years ago56,989 affectedConfirmed
The covered entity (CE), Orsini Pharmaceutical Services LLC reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 56,989 individuals. The PHI included demographic, financial, and treatment information. The CE notified HHS, the affected individuals, and the media. The CE took several corrective actions in response to the breach including retraining employees.
What is known
| People affected | 56,989 (as reported to HHS) |
|---|---|
| Disclosed | Mar 8, 2024 |
| Discovered | Jan 10, 2024 |
| Happened | Jan 8, 2024 |
| Attack | Phishing |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Orsini Pharmaceutical Servicesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Orsini Pharmaceutical Servicesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Orsini Pharmaceutical Servicesjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Orsini Pharmaceutical Services (Healthcare Provider, IL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 8, 2024 | 56,989 |
| California AGresidents of CA | Mar 26, 2024 | |
| Washington AGresidents of WA | Mar 26, 2024 | 832 |
| Oregon DOJresidents of OR | Mar 26, 2024 | 56,989 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 56989 · backfill source
- 2026-09-25 · disclosed: 2024-03-26 to 2024-03-08 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Orsini Pharmaceutical Services LLC reported that an employee was the target of an email phishing scheme that compromised the protected health information (PHI) of 56,989 individuals. The PHI included demographic, fi · backfill source
- 2026-09-25 · attack: unknown to phishing · backfill source
- 2026-09-25 · discovered: empty to 2024-01-10 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.