Prestige Care
Disclosed Nov 6, 20232 years ago116,956 affectedConfirmed
The covered entity (CE), Prestige Care, reported that it was the subject of a hacking attack that affected the protected health information (PHI) of 116,956 individuals. The PHI involved included names, dates of birth, claims information, diagnoses, and other treatment information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Privacy and Security Rules.
What is known
| People affected | 116,956 (as reported to HHS) |
|---|---|
| Disclosed | Nov 6, 2023 |
| Discovered | Sep 7, 2023 |
| Happened | Sep 7, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Prestige Careoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Prestige Careatg.wa.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Prestige Carein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Prestige Care (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 6, 2023 | 116,956 |
| California AGresidents of CA | Jan 31, 2024 | |
| Washington AGresidents of WA | Jan 31, 2024 | 17,145 |
| Indiana AGresidents of IN | Jan 31, 2024 | 8 |
| California AGresidents of CA | Mar 11, 2024 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 30087 to 116956 · backfill source
- 2026-09-25 · disclosed: 2024-01-31 to 2023-11-06 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Prestige Care, reported that it was the subject of a hacking attack that affected the protected health information (PHI) of 116,956 individuals. The PHI involved included names, dates of birth, claims information, d · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 30087 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-09-07 · backfill source
- 2026-09-25 · disclosed: 2024-03-11 to 2024-01-31 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.