Sunflower Medical Group
Disclosed Mar 7, 20251 year ago220,968 affectedConfirmed
The covered entity (CE), Sunflower Medical group, reported that it experienced a cyberattack that compromised the protected health information (PHI) of approximately 220,968 individuals. The PHI involved names, dates of birth, addresses, social security and drivers’ license numbers, claims information, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE deployed endpoint monitoring, implemented security enhancements, and retrained its workforce to better protect its electronic PHI. OCR provided the CE with technical assistance regarding the HIPAA Rules.
What is known
| People affected | 220,968 (as reported to HHS) |
|---|---|
| Disclosed | Mar 7, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Sunflower Medical Groupoag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-05-12 Sunflower Medical Group Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2025-03-07 Sunflower Medical Group Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Sunflower Medical Group (Healthcare Provider, KS)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Mar 7, 2025 | |
| Vermont AGresidents of VT | Mar 7, 2025 | |
| HHS archivetotal | Mar 7, 2025 | 220,968 |
| Vermont AGresidents of VT | May 12, 2025 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 220968 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Sunflower Medical group, reported that it experienced a cyberattack that compromised the protected health information (PHI) of approximately 220,968 individuals. The PHI involved names, dates of birth, addresses, so · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-03-07-sunflower-medical-group-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2025-05-12-sunflower-medical-group-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.