Salud Family Health
Disclosed Oct 5, 20223 years ago427,546 affectedConfirmed
The covered entity (CE), Salud Family Health, reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 427,546 individuals. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI. OCR provided technical assistance regarding the HIPAA Security Rule.
What is known
| People affected | 427,546 (as reported by the organization) |
|---|---|
| Disclosed | Oct 5, 2022 |
| Happened | Sep 5, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Salud Family Healthoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Salud Family Healthjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Salud Family Healthin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Salud Family Health (Healthcare Provider, CO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 5, 2022 | 427,546 |
| California AGresidents of CA | Nov 4, 2022 | |
| Oregon DOJresidents of OR | Nov 4, 2022 | 427,546 |
| Indiana AGresidents of IN | Nov 4, 2022 | 162 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2022-11-04 to 2022-10-05 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Salud Family Health, reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 427,546 individuals. The CE notified HHS, affected individuals, the media, and pr · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 427546 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.