PracticeMax
Disclosed Jun 30, 20215 years ago685,574 affectedConfirmed
The business associate (BA), PracticeMax, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 685,574 individuals. The PHI involved included names, diagnoses, addresses, dates of birth, Social Security numbers, financial information, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional technical safeguards.
What is known
| People affected | 685,574 (as reported to HHS) |
|---|---|
| Disclosed | Jun 30, 2021 |
| Discovered | Jun 7, 2022 |
| Happened | Apr 17, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: PracticeMaxoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: PracticeMaxjustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): PracticeMax (Business Associate, AZ)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jun 30, 2021 | 685,574 |
| California AGresidents of CA | Oct 19, 2021 | |
| California AGresidents of CA | Jun 10, 2022 | |
| Oregon DOJresidents of OR | Jun 10, 2022 | 529,058 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 685574 · backfill source
- 2026-09-25 · disclosed: 2021-10-19 to 2021-06-30 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), PracticeMax, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 685,574 individuals. The PHI involved included names, diagnoses, addresses, dates of birth, · backfill source
- 2026-09-25 · discovered: empty to 2022-06-07 · backfill source
- 2026-09-25 · disclosed: 2022-06-10 to 2021-10-19 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.