TAPESTRYHEALTH
ent_00423f86f3104352b955513a
Disclosures
3
HHS OCR · State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
6,494
nationwide · HHS OCR CT
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- TAPESTRYHEALTH
- Normalized
- tapestryhealth— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- CONNECTICUTHHS OCRas victim2025-12-22
TapestryHealth reported to HHS on 2025-12-22 a Unauthorized Access/Disclosure affecting 6,494 individuals. Breached information located on Other. The breach involved demographic, clinical, and financial PHI. TapestryHealth terminated the contracted employee and implemented additional safeguards.
- California State AGas victim2025-12-22
TapestryHealth disclosed that a contracted employee engaged in unauthorized job-sharing, allowing an unidentified individual to access patient personal and medical information between November 6, 2024, and November 3, 2025. The incident was discovered on November 3, 2025. Affected data included names, facility information, and medical records (diagnoses, treatments, medications). The employee was terminated, and access limitations were implemented. Credit monitoring was offered to affected individuals.
- Illinois State AGas victim2025-12-01
TAPESTRYHEALTH filed a data-breach notice with the Illinois Attorney General in December 2025 (case 25-12-681). The register records the breach as discovered on December 5, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.