HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICHEALTH_BASICLowContained
BAYADA Home Health Care, Inc.
bd_958c0384586962d3 · schema v1 · pii pii-v1
Full breach record for BAYADA Home Health Care, Inc. →BAYADA Home Health Care notified consumers of a third-party data breach involving vendor Doctor Alliance. Between Oct 31 and Nov 17, 2025, an unauthorized actor accessed Doctor Alliance systems, potentially copying Home Health Certification and Plan of Care forms containing names and health data. BAYADA reported the incident to federal law enforcement and HHS, offered credit monitoring, and is reviewing vendor policies.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9325a5273401c647New Hampshire State AGfiled 2026-01-30Verified
- bd_939cd2dc635e1608HHS OCRfiled 2026-01-30Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-01-30-bayada-home-health-care-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2026
- Raw hash
- 64ae0c413c4a2f686daea2c3021f51af95b9fd6ba1b7f2e3e40fbb5df3b37ff5
Reporting entity
- Name
- BAYADA Home Health Care, Inc.norm: bayada home health care
Victim entity
- Name
- BAYADA Home Health Care, Inc.norm: bayada home health care
Incident
- Discovered
- Dec 4, 2025
- Materiality determined
- —
- Notification sent
- Jan 30, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Reported the event to federal law enforcementReported the event to the U.S. Department of Health and Human Services
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.