SundaySky
Disclosed Mar 7, 20233 years ago37,095 affectedConfirmed
SundaySky, the business associate (BA), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 37,095 individuals. The PHI involved included names, personal email addresses, and health insurance information. The BA notified HHS, the affected individuals, the media, and law enforcement officials. In its mitigation efforts, the business associate implemented additional technical, administrative and security safeguards.
What is known
| People affected | 37,095 (as reported to HHS) |
|---|---|
| Disclosed | Mar 7, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): SundaySky (Business Associate, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 7, 2023 | 37,095 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.