Sutter North Surgery Center
Disclosed Sep 8, 20233 years ago861 affectedConfirmed
Sutter North Surgery Center, the covered entity (CE), reported that its business associate (BA) experienced a hacking incident affecting its digital environment which compromised the protected health information (PHI) of 861 individuals. The PHI involved included names, dates of birth, and treatment information. The CE notified HHS, affected individuals, and provided media notice. In its mitigation efforts, the CE paused sending PHI to the BA and revised its business associate agreement with the BA to better protect its sensitive data.
What is known
| People affected | 861 (as reported to HHS) |
|---|---|
| Disclosed | Sep 8, 2023 |
| Happened | Feb 9, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Sutter North Surgery Centeroag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Sutter North Surgery Center (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 8, 2023 | |
| HHS archivetotal | Sep 8, 2023 | 861 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 861 · backfill source
- 2026-09-25 · summary: empty to Sutter North Surgery Center, the covered entity (CE), reported that its business associate (BA) experienced a hacking incident affecting its digital environment which compromised the protected health information (PHI) of 861 individuals. Th · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.