PurFoods

Disclosed Aug 25, 20231,289,643 affectedConfirmed

The covered entity (CE), PurFoods, LLC, reported that it experienced a ransomware attack that exposed the protected health information (PHI) of 1,289,643 individuals. The PHI involved included demographic, clinical, and financial information. The CE notified HHS, affected individuals, and the media. The CE offered complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI. OCR provided technical assistance.

What is known

People affected	1,289,643 (as reported to HHS)
Disclosed	Aug 25, 2023
Discovered	Feb 22, 2023
Happened	Jan 16, 2023
Attack	Ransomware
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: PurFoods

Official noticeatg.wa.gov

Washington Attorney General breach notice: PurFoods

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Purfoods

Official noticein.gov

Indiana Attorney General 2023 data breach report: PurFoods

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): PurFoods (Healthcare Provider, IA)

Notices filed

Residents of CAAug 25, 2023

California AGCount not stated

Residents of WAAug 25, 2023

Washington AG9,094 people

Residents of INAug 25, 2023

Indiana AG48,592 people

TotalAug 25, 2023

HHS archive1,289,643 people

Residents of ORAug 31, 2023

Oregon DOJ1,237,681 people

History of this record

sector2026-09-25

other to healthby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

1237681 to 1289643by backfillSource

summary2026-09-25

empty to The covered entity (CE), PurFoods, LLC, reported that it experienced a ransomware attack that exposed the protected health information (PHI) of 1,289,643 individuals. The PHI involved included demographic, clinical, and financial informatioby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 1237681by backfillSource

attack2026-09-25

unknown to ransomwareby backfillSource

discovered2026-09-25

empty to 2023-02-22by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about PurFoods