Roots
Disclosed Oct 10, 202511 months ago2,000 affectedConfirmed
The covered entity (CE), Roots, reported that it was the subject of a data breach that affected the protected health information (PHI) of 2,000 individuals. The type of PHI involved demographic and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 2,000 (as reported to HHS) |
|---|---|
| Disclosed | Oct 10, 2025 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Roots (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 10, 2025 | 2,000 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.