Prentke Romich
Disclosed Sep 12, 20242 years ago51,627 affectedConfirmed
The covered entity (CE), Prentke Romich Company dba PRC-Saltillo, reported that it experienced a cyberattack that impacted the protected health information (PHI) of approximately 51,627 individuals. The PHI involved names, dates of birth, addresses, and other identifiers. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE deployed threat monitoring safeguards, disabled VPN from external sources, and is rebuilding its critical network systems to better protect its electronic PHI. OCR provided technical assistance.
What is known
| People affected | 51,627 (as reported to HHS) |
|---|---|
| Disclosed | Sep 12, 2024 |
| Discovered | Aug 21, 2024 |
| Happened | Aug 14, 2024 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Prentke Romichoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Prentke Romichatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-09-12 Prentke Romich Company dba PRC-Saltillo Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Prentke Romichin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Prentke Romich (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Sep 12, 2024 | |
| Indiana AGresidents of IN | Sep 12, 2024 | 6 |
| California AGresidents of CA | Sep 25, 2024 | |
| Washington AGresidents of WA | Sep 25, 2024 | 690 |
| HHS archivetotal | Sep 25, 2024 | 51,627 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 608 to 51627 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Prentke Romich Company dba PRC-Saltillo, reported that it experienced a cyberattack that impacted the protected health information (PHI) of approximately 51,627 individuals. The PHI involved names, dates of birth, a · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 608 · backfill source
- 2026-09-25 · disclosed: 2024-09-25 to 2024-09-12 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2024-08-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.