Wolfe Clinic
Disclosed Apr 9, 20215 years ago530,299 affectedConfirmed
The covered entity (CE), Wolfe Clinic, reported that its business associate (BA) was the victim of a breach affecting the protected health information (PHI) of 530,299 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and medication information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE offered complimentary credit monitoring services to affected individuals.
What is known
| People affected | 530,299 (as reported to HHS) |
|---|---|
| Disclosed | Apr 9, 2021 |
| Happened | Dec 4, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Wolfe Clinicoag.ca.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Wolfe Clinic (Healthcare Provider, IA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 9, 2021 | 499,779 |
| California AGresidents of CA | Jun 29, 2021 | |
| HHS archivetotal | Sep 9, 2022 | 530,299 |
| California AGresidents of CA | Sep 19, 2022 |
History of this record
- 2026-09-25 · disclosed: 2021-06-29 to 2021-04-09 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 530299 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Wolfe Clinic, reported that its business associate (BA) was the victim of a breach affecting the protected health information (PHI) of 530,299 individuals. The PHI involved included names, addresses, dates of birth, · backfill source
- 2026-09-25 · disclosed: 2022-09-19 to 2021-06-29 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.