SysInformation Healthcare Services
Disclosed Aug 17, 20233 years ago537,987 affectedConfirmed
SysInformation Healthcare Services, the covered entity (CE) reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 537,987 individuals. The PHI involved included names, claims information, and treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data.
What is known
| People affected | 537,987 (as reported to HHS) |
|---|---|
| Disclosed | Aug 17, 2023 |
| Happened | Jun 3, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: SysInformation Healthcare Servicesoag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-10-29 SysInformation Healthcare Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-04-26 SysInformation Healthcare Services Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: SysInformation Healthcare Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): SysInformation Healthcare Services (Business Associate, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 17, 2023 | 537,987 |
| California AGresidents of CA | Apr 17, 2024 | |
| Vermont AGresidents of VT | Apr 26, 2024 | |
| Indiana AGresidents of IN | May 23, 2024 | 20 |
| California AGresidents of CA | Oct 29, 2024 | |
| Vermont AGresidents of VT | Oct 29, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 129073 to 537987 · backfill source
- 2026-09-25 · disclosed: 2024-04-17 to 2023-08-17 · backfill source
- 2026-09-25 · summary: empty to SysInformation Healthcare Services, the covered entity (CE) reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 537,987 individuals. The PHI involved included names, claims information · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 129073 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-04-26-sysinformation-healthcare-services-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-10-29-sysinformation-healthcare-services-data-breach-notice-consumers · backfill source
- 2026-09-25 · disclosed: 2024-10-29 to 2024-04-17 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.