Regional Care
Disclosed Dec 16, 20241 year ago225,728 affectedConfirmed
The covered entity (CE), Regional Care, Inc., reported that it became aware of suspicious activity on its systems involving a potential ransomware incident. This breach affected 225,728 individuals. The protected health information (PHI) involved included demographic, clinical, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.
What is known
| People affected | 225,728 (as reported to HHS) |
|---|---|
| Disclosed | Dec 16, 2024 |
| Discovered | Sep 18, 2024 |
| Happened | Sep 13, 2024 |
| Attack | Phishing |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Regional Careoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Regional Careatg.wa.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-12-16 Regional Care Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Regional Care (Healthcare Clearing House, NE)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 16, 2024 | |
| Washington AGresidents of WA | Dec 16, 2024 | 1,580 |
| Vermont AGresidents of VT | Dec 16, 2024 | |
| HHS archivetotal | Dec 17, 2024 | 225,728 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 225728 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Regional Care, Inc., reported that it became aware of suspicious activity on its systems involving a potential ransomware incident. This breach affected 225,728 individuals. The protected health information (PHI) in · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-12-16-regional-care-data-breach-notice-consumers · backfill source
- 2026-09-25 · attack: unknown to phishing · backfill source
- 2026-09-25 · discovered: empty to 2024-09-18 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.