Breachesby GlyphRoswell Park Comprehensive Cancer Center
Disclosed Oct 18, 2019149,126 affectedConfirmed
The covered entity (CE), Roswell Park Comprehensive Cancer Center, reported that its business associate experienced a ransomware attack that affected the electronic protected health information (ePHI) of approximately 149,126 individuals. The ePHI involved included names, addresses, email addresses, dates of birth, diagnoses, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.
What is known
| People affected | 149,126 (as reported to HHS) |
|---|---|
| Disclosed | Oct 18, 2019 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Roswell Park Comprehensive Cancer Center
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.