Variety Care
Disclosed Dec 22, 20259 months ago17,163 affectedConfirmed
The covered entity (CE), Variety Care, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 17,163 individuals. The PHI involved demographic and clinical information. The CE notified HHS and affected individuals; the subcontractor notified the media on the CE’s behalf. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 17,163 (as reported to HHS) |
|---|---|
| Disclosed | Dec 22, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Variety Care (Healthcare Provider, OK)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 22, 2025 | 17,163 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.