Tri-City Healthcare District
Disclosed Apr 4, 20242 years ago115,996 affectedConfirmed
The covered entity (CE), Tri-City Healthcare District, reported that it experienced a ransomware incident that affected the electronic protected health information (ePHI) of 108,149 individuals. The ePHI involved included names, dates of birth, Social Security numbers, addresses/zip codes, drivers’ license numbers, diagnoses/conditions, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards. Staff were also retrained in its requirements to protect and secure PHI. OCR provided technical assistance to the CE regarding the HIPAA Security Rule.
What is known
| People affected | 115,996 (as reported by the organization) |
|---|---|
| Disclosed | Apr 4, 2024 |
| Happened | Feb 11, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Tri-City Healthcare Districtoag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2024-04-04 Tri-City Healthcare District Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Tri-City Healthcare Districtin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Tri-City Healthcare District (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Apr 4, 2024 | |
| Vermont AGresidents of VT | Apr 4, 2024 | |
| Indiana AGresidents of IN | Apr 4, 2024 | 62 |
| HHS archivetotal | May 23, 2024 | 108,149 |
| California AGresidents of CA | Oct 12, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Tri-City Healthcare District, reported that it experienced a ransomware incident that affected the electronic protected health information (ePHI) of 108,149 individuals. The ePHI involved included names, dates of bi · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 115996 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-04-04-tri-city-healthcare-district-data-breach-notice-consumers · backfill source
- 2026-09-25 · disclosed: 2024-10-12 to 2024-04-04 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.