Every public data breach

Disclosed this week44On record26,355

44 disclosed this week · 26,355 on record

Warner Norcross and Judd

Disclosed Jul 11, 2022255,160 affectedConfirmed

Official notice

The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected255,160 (as reported to HHS)
DisclosedJul 11, 2022
DiscoveredOct 22, 2021
HappenedJun 28, 2021
AttackRansomware
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Official noticeoag.ca.gov
California Attorney General breach notice: Warner Norcross and Judd
Official noticeatg.wa.gov
Washington Attorney General breach notice: Warner Norcross & Judd
Official noticejustice.oregon.gov
Oregon DOJ breach notice: Warner, Norcross & Judd
Official noticein.gov
Indiana Attorney General 2022 data breach report: Warner Norcross & Judd
Official noticeocrportal.hhs.gov
HHS OCR breach report (archive, resolved): Warner Norcross and Judd (Business Associate, MI)

Notices filed

Residents of CAJul 11, 2022
California AGCount not stated
Residents of INJul 11, 2022
Indiana AG2,415 people
Residents of WAAug 15, 2022
Washington AG747 people
Residents of ORAug 15, 2022
Oregon DOJ214,439 people
Residents of CAAug 17, 2022
California AGCount not stated
TotalAug 24, 2022
HHS archive255,160 people
Residents of CAAug 25, 2022
California AGCount not stated
Residents of WAAug 26, 2022
Washington AG780 people
Residents of ORAug 26, 2022
Oregon DOJ255,160 people
History of this record
sector2026-09-25
other to healthby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
organization to hhsby backfillSource
records2026-09-25
19274 to 255160by backfillSource
summary2026-09-25
empty to The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medicationsby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 19274by backfillSource
attack2026-09-25
unknown to ransomwareby backfillSource
discovered2026-09-25
empty to 2021-10-22by backfillSource
disclosed2026-09-25
2022-08-17 to 2022-07-11by backfillSource
disclosed2026-09-25
2022-08-25 to 2022-08-17by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Warner Norcross and Judd