Skip to content

Quantum Health

Disclosed Jul 29, 20268 weeks ago625,945 affectedConfirmed

Official notice

What is known

People affected625,945 (as reported by the organization)
DisclosedJul 29, 2026
DiscoveredJun 1, 2026
HappenedMay 29, 2026
AttackHacking
Data exposedNames, Health, Social Security numbers, Insurance
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: Quantum Healthoag.ca.gov · Official notice
Washington Attorney General breach notice: Quantum Healthatg.wa.gov · Official notice
Oregon DOJ breach notice: Quantum Healthjustice.oregon.gov · Official notice
HHS OCR breach report: Quantum Health (Business Associate, OH)ocrportal.hhs.gov · Official notice
Texas Attorney General data security breach report BR-0005262: Quantum Healthoag.my.site.com · Official notice

Notices filed

WhereFiledPeople
HHS OCRtotalJul 292,104
California AGresidents of CAAug 14
Washington AGresidents of WAAug 145,909
Oregon DOJresidents of ORAug 14184,376
Texas AGresidents of TXAug 1868,451

Other breaches at Quantum Health

BreachAffected
Disclosed Mar 17, 2017Mar 17, 20179 years ago737
History of this record
  • 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance"] · backfill source
  • 2026-09-25 · records_basis: hhs to organization · backfill source
  • 2026-09-25 · records: 2104 to 625945 · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 2104 · backfill source
  • 2026-09-25 · disclosed: 2026-08-14 to 2026-07-29 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2026-06-01 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Quantum Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.