TapestryHealth
Disclosed Dec 22, 20259 months ago6,494 affectedConfirmed
The covered entity (CE), TapestryHealth, reported that an unauthorized individual gained access to the the protected health information (PHI) of 6,494 individuals. The PHI involved demographic, clinical and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE immediately terminated the contracted employee and implemented additional technical and administrative safeguards.
What is known
| People affected | 6,494 (as reported to HHS) |
|---|---|
| Disclosed | Dec 22, 2025 |
| Happened | Nov 6, 2024 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: TapestryHealthoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): TapestryHealth (Healthcare Provider, CT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Dec 22, 2025 | |
| HHS archivetotal | Dec 22, 2025 | 6,494 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 6494 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), TapestryHealth, reported that an unauthorized individual gained access to the the protected health information (PHI) of 6,494 individuals. The PHI involved demographic, clinical and financial information. The CE not · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.