Breachesby GlyphPeople's Community Clinic
Disclosed Dec 19, 2025700,000 affectedConfirmed
The covered entity (CE), People’s Community Clinic, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 1,788 of the CE’s patients. The PHI involved clinical and demographic information. The CE notified HHS, affected individuals, and published notice on its website, and the subcontractor also notified individuals, the media, and HHS on the CE’s behalf. OCR provided technical assistance to the CE about business associate agreements and the requirements of the HIPAA Breach Notification Rule.
What is known
| People affected | 700,000 (as reported by the organization) |
|---|---|
| Disclosed | Dec 19, 2025 |
| Discovered | Dec 12, 2025 |
| Happened | Nov 1, 2024 |
| Attack | Hacking |
| Data exposed | Social Security numbersHealthInsuranceDates of birthAddressesNames |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to hackingby backfillSource
empty to The covered entity (CE), People’s Community Clinic, reported that a subcontractor of its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 1,788 of the CE’s patients. The PHI involvby backfillSource
2026-03-12 to 2025-12-19by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.