SysInformation Healthcare Services

Disclosed Aug 17, 2023537,987 affectedConfirmed

SysInformation Healthcare Services, the covered entity (CE) reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 537,987 individuals. The PHI involved included names, claims information, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data.

What is known

People affected	537,987 (as reported to HHS)
Disclosed	Aug 17, 2023
Happened	Jun 3, 2023
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: SysInformation Healthcare Services

Official noticeago.vermont.gov

Vermont Attorney General: 2024-10-29 SysInformation Healthcare Services Data Breach Notice to Consumers

Official noticeago.vermont.gov

Vermont Attorney General: 2024-04-26 SysInformation Healthcare Services Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2024 data breach report: SysInformation Healthcare Services

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): SysInformation Healthcare Services (Business Associate, TX)

Notices filed

TotalAug 17, 2023

HHS archive537,987 people

Residents of CAApr 17, 2024

California AGCount not stated

Residents of VTApr 26, 2024

Vermont AGCount not stated

Residents of INMay 23, 2024

Indiana AG20 people

Residents of CAOct 29, 2024

California AGCount not stated

Residents of VTOct 29, 2024

Vermont AGCount not stated

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

129073 to 537987by backfillSource

disclosed2026-09-25

2024-04-17 to 2023-08-17by backfillSource

summary2026-09-25

empty to SysInformation Healthcare Services, the covered entity (CE) reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 537,987 individuals. The PHI involved included names, claims informationby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 129073by backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-04-26-sysinformation-healthcare-services-data-breach-notice-consumersby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2024-10-29-sysinformation-healthcare-services-data-breach-notice-consumersby backfillSource

disclosed2026-09-25

2024-10-29 to 2024-04-17by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about SysInformation Healthcare Services