PurFoods
Disclosed Aug 25, 20233 years ago1,289,643 affectedConfirmed
The covered entity (CE), PurFoods, LLC, reported that it experienced a ransomware attack that exposed the protected health information (PHI) of 1,289,643 individuals. The PHI involved included demographic, clinical, and financial information. The CE notified HHS, affected individuals, and the media. The CE offered complimentary credit monitoring services and implemented additional administrative and technical safeguards to better protect PHI. OCR provided technical assistance.
What is known
| People affected | 1,289,643 (as reported to HHS) |
|---|---|
| Disclosed | Aug 25, 2023 |
| Discovered | Feb 22, 2023 |
| Happened | Jan 16, 2023 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: PurFoodsoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: PurFoodsatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Purfoodsjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: PurFoodsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): PurFoods (Healthcare Provider, IA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Aug 25, 2023 | |
| Washington AGresidents of WA | Aug 25, 2023 | 9,094 |
| Indiana AGresidents of IN | Aug 25, 2023 | 48,592 |
| HHS archivetotal | Aug 25, 2023 | 1,289,643 |
| Oregon DOJresidents of OR | Aug 31, 2023 | 1,237,681 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 1237681 to 1289643 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), PurFoods, LLC, reported that it experienced a ransomware attack that exposed the protected health information (PHI) of 1,289,643 individuals. The PHI involved included demographic, clinical, and financial informatio · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1237681 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2023-02-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.