Warner Norcross and Judd
Disclosed Jul 11, 20224 years ago255,160 affectedConfirmed
The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 255,160 (as reported to HHS) |
|---|---|
| Disclosed | Jul 11, 2022 |
| Discovered | Oct 22, 2021 |
| Happened | Jun 28, 2021 |
| Attack | Ransomware |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Warner Norcross and Juddoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: Warner Norcross & Juddatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: Warner, Norcross & Juddjustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Warner Norcross & Juddin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Warner Norcross and Judd (Business Associate, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Jul 11, 2022 | |
| Indiana AGresidents of IN | Jul 11, 2022 | 2,415 |
| Washington AGresidents of WA | Aug 15, 2022 | 747 |
| Oregon DOJresidents of OR | Aug 15, 2022 | 214,439 |
| California AGresidents of CA | Aug 17, 2022 | |
| HHS archivetotal | Aug 24, 2022 | 255,160 |
| California AGresidents of CA | Aug 25, 2022 | |
| Washington AGresidents of WA | Aug 26, 2022 | 780 |
| Oregon DOJresidents of OR | Aug 26, 2022 | 255,160 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 19274 to 255160 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medications · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 19274 · backfill source
- 2026-09-25 · attack: unknown to ransomware · backfill source
- 2026-09-25 · discovered: empty to 2021-10-22 · backfill source
- 2026-09-25 · disclosed: 2022-08-17 to 2022-07-11 · backfill source
- 2026-09-25 · disclosed: 2022-08-25 to 2022-08-17 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.