PIH Health

Disclosed Jan 31, 20251 year ago2,947,264 affectedConfirmed

Official notice

What is known

People affected	2,947,264 (as reported to HHS)
Disclosed	Jan 31, 2025
Discovered	Dec 1, 2024
Happened	Nov 14, 2024
Attack	Hacking
Data exposed	Names, Health
Sector	Healthcare · US
Status	Confirmed

Sources

Source	Kind
California Attorney General breach notice: PIH Healthoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: PIH Healthatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: PIH Healthjustice.oregon.gov · Official notice	Official notice
HHS OCR breach report: PIH Health (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice	Official notice

Notices filed

Where	Filed	People
HHS OCRtotal	Jan 31, 2025	2,947,264
California AGresidents of CA	Feb 27
Washington AGresidents of WA	Mar 4	3,639
Oregon DOJresidents of OR	Mar 18	2,351

Other breaches at PIH Health

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Mar 3, 2026Mar 36 months ago	Mar 36 months ago	Not stated	Healthcare	Confirmed	1.4M
Disclosed Jan 10, 2020Jan 10, 20206 years agoHacking	Jan 10, 20206 years ago	Hacking	Healthcare	Confirmed	200K

History of this record

2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · records_basis: empty to hhs · backfill source
2026-09-25 · records: empty to 2947264 · backfill source
2026-09-25 · disclosed: 2026-02-27 to 2025-01-31 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2024-12-01 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about PIH Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.