Practice Resources
Disclosed Aug 4, 20224 years ago942,138 affectedConfirmed
Practice Resources, the business associate (BA), reported that it experienced a ransomware incident that compromised the protected health information (PHI) of approximately 942,138 individuals. The PHI involved included names, addresses, dates of birth, claims information, diagnoses, and other treatment information. The BA notified HHS, affected individuals, the media, law enforcement officials, and provided substitute notice on its website. In its mitigation efforts, the BA provided identity theft protection to affected individuals and implemented additional administrative, technical, and security safeguards. The BA also retrained its staff.
What is known
| People affected | 942,138 (as reported to HHS) |
|---|---|
| Disclosed | Aug 4, 2022 |
| Happened | Apr 12, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Practice Resourcesoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Practice Resources (Business Associate, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 4, 2022 | |
| HHS archivetotal | Aug 4, 2022 | 942,138 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 942138 · backfill source
- 2026-09-25 · summary: empty to Practice Resources, the business associate (BA), reported that it experienced a ransomware incident that compromised the protected health information (PHI) of approximately 942,138 individuals. The PHI involved included names, addresses, da · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.