Sigmund Software
Disclosed Oct 20, 20223 years ago4,767 affectedConfirmed
The business associate (BA), Sigmund Software, LLC, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 4,767 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, and health information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the BA offered free credit monitoring to affected individuals and implemented additional administrative, technical, and security safeguards. Staff were also retrained on obligations to protect and secure PHI.
What is known
| People affected | 4,767 (as reported to HHS) |
|---|---|
| Disclosed | Oct 20, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Tech · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2022 10 20 Sigmund Software Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Sigmund Softwarein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Sigmund Software (Business Associate, CT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Oct 20, 2022 | |
| Indiana AGresidents of IN | Oct 20, 2022 | 18 |
| HHS archivetotal | Oct 20, 2022 | 4,767 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 983 to 4767 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Sigmund Software, LLC, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 4,767 individuals. The PHI involved included names, addresses, dates of birth, dr · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 983 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.