Shields Health Care Group

Disclosed May 27, 20222,380,483 affectedConfirmed

The business associate (BA), Shields Health Care Group, reported that it was the subject of a data breach that affected the protected health information (PHI) of 2,380,483 individuals. The PHI involved included clinical, demographic, and financial information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional administrative, technical, and security safeguards.

What is known

People affected	2,380,483 (as reported to HHS)
Disclosed	May 27, 2022
Discovered	Mar 28, 2022
Happened	Mar 7, 2022
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Shields Health Care Group

Official noticeatg.wa.gov

Washington Attorney General breach notice: Shields Health Care Group

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Shields Health Care Group

Official noticeago.vermont.gov

Vermont Attorney General: 2023-04-19 Shields Health Care Group Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2022 data breach report: Shields Health Care Group

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Shields Health Care Group (Business Associate, MA)

Notices filed

TotalMay 27, 2022

HHS archive2,380,483 people

Residents of CAJul 22, 2022

California AGCount not stated

Residents of WAJul 22, 2022

Washington AG1,018 people

Residents of ORJul 22, 2022

Oregon DOJ1,804,069 people

Residents of INJul 25, 2022

Indiana AG65 people

Residents of CAApr 19, 2023

California AGCount not stated

Residents of VTApr 19, 2023

Vermont AGCount not stated

History of this record

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

1804069 to 2380483by backfillSource

disclosed2026-09-25

2022-07-22 to 2022-05-27by backfillSource

summary2026-09-25

empty to The business associate (BA), Shields Health Care Group, reported that it was the subject of a data breach that affected the protected health information (PHI) of 2,380,483 individuals. The PHI involved included clinical, demographic, and fiby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 1804069by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2023-04-19-shields-health-care-group-data-breach-notice-consumersby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

discovered2026-09-25

empty to 2022-03-28by backfillSource

disclosed2026-09-25

2023-04-19 to 2022-07-22by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Shields Health Care Group