Wakefield & Associates

Disclosed Nov 7, 2025371,577 affectedConfirmed

The business associate (BA), Wakefield & Associates, LLC, reported that its third-party administrator experienced a hacking incident that affected the protected health information (PHI) of 31,751 individuals. The PHI involved demographic and financial information. The BA notified HHS, the affected individuals, and the media. The BA notified HHS, the affected individuals, and the media. In response to the breach, the BA implemented additional technical and administrative safeguards.

What is known

People affected	371,577 (as reported by the organization)
Disclosed	Nov 7, 2025
Discovered	Jan 17, 2025
Happened	Mar 2, 2025
Attack	Hacking
Data exposed	Social Security numbersHealthDates of birthAddressesNames
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Wakefield & Associates

Official noticejustice.oregon.gov

Oregon DOJ breach notice: Wakefield & Associates

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004657: Wakefield & Associates

Official noticeago.vermont.gov

Vermont Attorney General: 2025-11-07 Wakefield & Associates Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2025 data breach report: Wakefield & Associates

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Wakefield & Associates (Business Associate, TN)

Notices filed

Residents of VTNov 7, 2025

Vermont AGCount not stated

Residents of INNov 7, 2025

Indiana AG126 people

Residents of TXNov 12, 2025

Texas AG2,286 people

Residents of ORDec 18, 2025

Oregon DOJ371,577 people

Residents of CAJan 30

California AGCount not stated

TotalJan 30

HHS archive31,751 people

History of this record

sector2026-09-25

other to healthby backfillSource

attack2026-09-25

unknown to hackingby backfillSource

summary2026-09-25

empty to The business associate (BA), Wakefield & Associates, LLC, reported that its third-party administrator experienced a hacking incident that affected the protected health information (PHI) of 31,751 individuals. The PHI involved demographic anby backfillSource

source2026-09-25

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdfby backfillSource

source2026-09-25

empty to https://ago.vermont.gov/document/2025-11-07-wakefield-associates-data-breach-notice-consumersby backfillSource

disclosed2026-09-25

2025-11-12 to 2025-11-07by backfillSource

data_types2026-09-25

[] to ["ssn","health","dob","addresses","names"]by backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 371577by backfillSource

disclosed2026-09-25

2025-12-18 to 2025-11-12by backfillSource

disclosed2026-09-25

2026-01-30 to 2025-12-18by backfillSource

discovered2026-09-25

empty to 2025-01-17by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Wakefield & Associates