Patented Acquisition
Disclosed Jul 3, 20242 years ago12,787 affectedConfirmed
The business associate (BA), Patented Acquisition Corporation, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 12,787 individuals. The PHI involved names, addresses, and other identifiers. The BA notified HHS, affected individuals, and the media. In its mitigation efforts, the BA provided security awareness training to its workforce, conducted a risk analysis, and enhanced its access controls to better protect PHI. OCR provided technical assistance to the BA regarding the HIPAA Rules.
What is known
| People affected | 12,787 (as reported by the organization) |
|---|---|
| Disclosed | Jul 3, 2024 |
| Happened | May 2, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2024 data breach report: Patented Acquisitionin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Patented Acquisition (Business Associate, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jul 3, 2024 | 28 |
| HHS archivetotal | Jul 3, 2024 | 12,787 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Patented Acquisition Corporation, reported that it experienced a cyberattack that compromised the protected health information (PHI) of 12,787 individuals. The PHI involved names, addresses, and other identifier · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.