Breachesby GlyphSmile Brands
Disclosed Jun 24, 20212,592,494 affectedConfirmed
The business associate (BA), Smile Brands, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 2,592,494 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses, and lab results. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA offered free credit monitoring services and implemented additional technical and administrative safeguards to better protect sensitive data.
What is known
| People affected | 2,592,494 (as reported to HHS) |
|---|---|
| Disclosed | Jun 24, 2021 |
| Discovered | Apr 24, 2021 |
| Happened | Apr 23, 2021 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Retail · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 2592494by backfillSource
2021-08-09 to 2021-06-24by backfillSource
empty to The business associate (BA), Smile Brands, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 2,592,494 individuals. The PHI involved included names, dates of birth, addresses, Social by backfillSource
2021-09-03 to 2021-08-09by backfillSource
unknown to ransomwareby backfillSource
empty to 2021-04-24by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.