Physician's Business Office
Disclosed Sep 23, 20224 years ago196,673 affectedConfirmed
Physician’s Business Office, the business associate (BA) reported that it experienced a ransomware attach that compromised the protected heath information (PHI) of 196,673 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses/conditions, lab results, medications, and other treatment information. In response to the breach, the BA retrained it staff and implemented additional administrative and technical safeguards.
What is known
| People affected | 196,673 (as reported to HHS) |
|---|---|
| Disclosed | Sep 23, 2022 |
| Happened | Apr 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Physician's Business Officeoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Physician's Business Officein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Physician's Business Office (Business Associate, WV)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 23, 2022 | |
| Indiana AGresidents of IN | Sep 23, 2022 | 89 |
| HHS archivetotal | Sep 23, 2022 | 196,673 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 196573 to 196673 · backfill source
- 2026-09-25 · summary: empty to Physician’s Business Office, the business associate (BA) reported that it experienced a ransomware attach that compromised the protected heath information (PHI) of 196,673 individuals. The PHI involved included names, addresses, dates of bi · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 196573 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.