Skip to content

TRG

Disclosed Jun 18, 20251 year ago142,004 affectedConfirmed

Official notice

The covered entity (CE), TRG, LLC, reported that its business associate (BA) experienced a ransomware incident that affected the protected health information (PHI) of 142,004 individuals. The PHI involved clinical, demographic, and financial information. The CE notified HHS, affected individuals, and the media. The BA notified law enforcement. In response to the breach, the CE offered free credit monitoring services.

What is known

People affected142,004 (as reported to HHS)
DisclosedJun 18, 2025
DiscoveredMar 31, 2025
HappenedJul 5, 2024
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
California Attorney General breach notice: TRGoag.ca.gov · Official notice
Washington Attorney General breach notice: TRGatg.wa.gov · Official notice
Oregon DOJ breach notice: TRGjustice.oregon.gov · Official notice
HHS OCR breach report (archive, resolved): TRG (Healthcare Provider, OR)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
California AGresidents of CAJun 18, 2025
Washington AGresidents of WAJun 18, 20252,352
HHS archivetotalJun 18, 2025142,004
Oregon DOJresidents of ORSep 15, 2025126,994
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: empty to hhs · backfill source
  • 2026-09-25 · records: empty to 142004 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), TRG, LLC, reported that its business associate (BA) experienced a ransomware incident that affected the protected health information (PHI) of 142,004 individuals. The PHI involved clinical, demographic, and financia · backfill source
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2025-03-31 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about TRG

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.