TapestryHealth

Disclosed Dec 22, 20256,494 affectedConfirmed

The covered entity (CE), TapestryHealth, reported that an unauthorized individual gained access to the the protected health information (PHI) of 6,494 individuals. The PHI involved demographic, clinical and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE immediately terminated the contracted employee and implemented additional technical and administrative safeguards.

What is known

People affected	6,494 (as reported to HHS)
Disclosed	Dec 22, 2025
Happened	Nov 6, 2024
Attack	Insider
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: TapestryHealth

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): TapestryHealth (Healthcare Provider, CT)

Notices filed

Residents of CADec 22, 2025

California AGCount not stated

TotalDec 22, 2025

HHS archive6,494 people

History of this record

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to insiderby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 6494by backfillSource

summary2026-09-25

empty to The covered entity (CE), TapestryHealth, reported that an unauthorized individual gained access to the the protected health information (PHI) of 6,494 individuals. The PHI involved demographic, clinical and financial information. The CE notby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about TapestryHealth