TIC International
Disclosed Sep 6, 20224 years ago187,341 affectedConfirmed
The business associate (BA), TIC International Corporation, reported that it experienced a cyberattack that affected the protected health information (PHI) of 1,362 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, and treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring and identity and fraud protection and implemented additional technical safeguards to better protect its PHI. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 187,341 (as reported by the organization) |
|---|---|
| Disclosed | Sep 6, 2022 |
| Discovered | Mar 30, 2022 |
| Happened | Mar 30, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: TIC Internationaloag.ca.gov · Official notice | Official notice |
| Oregon DOJ breach notice: TIC Internationaljustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: TIC Internationalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): TIC International (Business Associate, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Sep 6, 2022 | 17,323 |
| Oregon DOJresidents of OR | Sep 9, 2022 | 187,341 |
| HHS archivetotal | Nov 1, 2022 | 1,362 |
| California AGresidents of CA | Nov 2, 2022 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), TIC International Corporation, reported that it experienced a cyberattack that affected the protected health information (PHI) of 1,362 individuals. The PHI involved included names, addresses, dates of birth, dr · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 187341 · backfill source
- 2026-09-25 · disclosed: 2022-09-09 to 2022-09-06 · backfill source
- 2026-09-25 · disclosed: 2022-11-02 to 2022-09-09 · backfill source
- 2026-09-25 · discovered: empty to 2022-03-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.