Perry Johnson & Associates
Disclosed Nov 3, 20232 years ago9,302,588 affectedConfirmed
Medical transcription firm PJ&A breach exposes data of nearly 9 million patients
Medical transcription vendor PJ&A said attackers accessed its systems in spring 2023 (its California notice lists April 7 to April 19, 2023) and took medical transcription files. It reported more than 8.95 million affected patients to HHS, including patients of Northwell Health and Cook County Health.
What is known
| People affected | 9,302,588 (as reported to HHS) |
|---|---|
| Disclosed | Nov 3, 2023 |
| Discovered | May 2, 2023 |
| Happened | Apr 7, 2023 |
| Attack | Hacking |
| Data exposed | Names, Dates of birth, Addresses, Social Security numbers, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Perry Johnson & Associatesoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Perry Johnson & Associatesatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Perry Johnson & Associatesjustice.oregon.gov · Official notice | Official notice |
| California AG data breach notice: Perry Johnson & Associates, Inc. (PJ&A)oag.ca.gov · Regulator | Regulator |
| 9 million patients had data stolen after US medical transcription firm hackedtechcrunch.com · News | News |
| HHS OCR breach report (archive, resolved): Perry Johnson & Associates (Business Associate, NV)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 3, 2023 | |
| Washington AGresidents of WA | Nov 3, 2023 | 22,088 |
| Oregon DOJresidents of OR | Nov 3, 2023 | 3,891,565 |
| Researchtotal | Nov 3, 2023 | 8,950,000 |
| HHS archivetotal | Nov 3, 2023 | 9,302,588 |
| California AGresidents of CA | Feb 5, 2024 | |
| California AGresidents of CA | Feb 8, 2024 |
History of this record
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 8950000 to 9302588 · backfill source
- 2026-09-25 · data_types: [] to ["names","dob","addresses","ssn","health","insurance"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 8950000 · seed source
- 2026-09-25 · summary: empty to Medical transcription vendor PJ&A said attackers accessed its systems in spring 2023 (its California notice lists April 7 to April 19, 2023) and took medical transcription files. It reported more than 8.95 million affected patients to HHS, · seed source
- 2026-09-25 · title: empty to Medical transcription firm PJ&A breach exposes data of nearly 9 million patients · seed source
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · discovered: empty to 2023-05-02 · backfill source
- 2026-09-25 · disclosed: 2024-02-05 to 2023-11-03 · backfill source
- 2026-09-25 · disclosed: 2024-02-08 to 2024-02-05 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.