Super Care
Disclosed Mar 25, 20215 years ago318,379 affectedConfirmed
The covered entity (CE), Super Care dba SuperCare Health, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 317,863 individuals. The PHI involved included names, addresses, dates of birth, Social Security and drivers’ license numbers, medical record numbers, health insurance information, and claims and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided free credit monitoring and identity theft protection services and implemented additional administrative, technical, security, and physical safeguards to better protect its sensitive data. Security awareness training was provided to all staff.
What is known
| People affected | 318,379 (as reported by the organization) |
|---|---|
| Disclosed | Mar 25, 2021 |
| Discovered | Jul 27, 2021 |
| Happened | Jul 23, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Super Careoag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Super Carejustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Super Carein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Super Care (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 25, 2021 | 55 |
| California AGresidents of CA | Mar 25, 2022 | |
| Oregon DOJresidents of OR | Mar 28, 2022 | 318,379 |
| HHS archivetotal | Mar 28, 2022 | 317,863 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Super Care dba SuperCare Health, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 317,863 individuals. The PHI involved included names, addresses, dates of birth · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 318379 · backfill source
- 2026-09-25 · disclosed: 2022-03-25 to 2021-03-25 · backfill source
- 2026-09-25 · discovered: empty to 2021-07-27 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.