Sapphire Community Health
Disclosed Oct 17, 20255,617 affectedConfirmed
The covered entity (CE), Sapphire Community Health, reported that its business associate (BA) experienced a cyber-attack on its network which contained the protected health information (PHI) of approximately 5,617 individuals. The PHI involved names, addresses, dates of birth, drivers’ license numbers, social security numbers, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 5,617 (as reported to HHS) |
|---|---|
| Disclosed | Oct 17, 2025 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Sapphire Community Health
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.