Wright & Filippis
Disclosed Nov 18, 20223 years ago907,642 affectedConfirmed
The covered entity (CE), Wright & Fillipis, reported that it was the subject of a cybersecurity attack that compromised the protected health information (PHI) of 877,584 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and claims and financial information. In response to the breach, the CE provided administrative, technical, and security safeguards. OCR provided the CE with technical assistance.
What is known
| People affected | 907,642 (as reported by the organization) |
|---|---|
| Disclosed | Nov 18, 2022 |
| Happened | Jan 26, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Wright & Filippisoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2022 data breach report: Wright & Filippisin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Wright & Filippis (Healthcare Provider, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Nov 18, 2022 | |
| Indiana AGresidents of IN | Nov 18, 2022 | 4,050 |
| HHS archivetotal | Nov 18, 2022 | 877,584 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Wright & Fillipis, reported that it was the subject of a cybersecurity attack that compromised the protected health information (PHI) of 877,584 individuals. The PHI involved included names, addresses, dates of birt · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 907642 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.