Tycon Medical Systems
Disclosed Dec 30, 20241 year ago112,847 affectedConfirmed
The covered entity (CE), Tycon Medical Systems, Inc., reported that an unauthorized party gained access to its network environment, accessing the protected health information (PHI) of 112,847 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, medical information, and health insurance information. The CE notified HHS, the affected individuals, and the media. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI, including conducting a risk analysis and asset inventory, strengthened its policies and procedures, and implemented multifactor authentication.
What is known
| People affected | 112,847 (as reported to HHS) |
|---|---|
| Disclosed | Dec 30, 2024 |
| Happened | Oct 15, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-12-30 Tycon Medical Systems Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Tycon Medical Systemsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Tycon Medical Systems (Healthcare Provider, VA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Dec 30, 2024 | |
| Indiana AGresidents of IN | Dec 30, 2024 | 40 |
| HHS archivetotal | Dec 30, 2024 | 112,847 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 95947 to 112847 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Tycon Medical Systems, Inc., reported that an unauthorized party gained access to its network environment, accessing the protected health information (PHI) of 112,847 individuals. The PHI involved included names, ad · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 95947 · backfill source
- 2026-09-25 · occurred: empty to 2024-10-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.