Breachesby GlyphOsborn Cancer Care
Disclosed May 28, 20214,614 affectedConfirmed
The covered entity (CE), Osborn Cancer Care, reported that its business associate (BA) was the subject of a ransomware attack affecting the protected health information (PHI) of 4,614 individuals. The PHI involved included names, dates of birth, drivers’ license information, addresses, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE provided complimentary credit monitoring services to those affected. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 4,614 (as reported to HHS) |
|---|---|
| Disclosed | May 28, 2021 |
| Discovered | Feb 17, 2021 |
| Happened | Feb 10, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
4424 to 4614by backfillSource
empty to The covered entity (CE), Osborn Cancer Care, reported that its business associate (BA) was the subject of a ransomware attack affecting the protected health information (PHI) of 4,614 individuals. The PHI involved included names, dates of bby backfillSource
empty to organizationby backfillSource
empty to 4424by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.