One Medical
ent_51739745428287c01a53d35d
Disclosures
4
HHS OCR · State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
153,174
nationwide · HHS OCR CA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- One Medical
- Normalized
- one medical— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- app.onemedical.com
Disclosure history (4)newest first
- CALIFORNIAHHS OCRas victim2026-07-17
One Medical Group, Inc. reported to HHS on 2026-07-17 a Hacking/IT Incident affecting 153174 individuals. Breached information located on Network Server.
- New Hampshire State AGas victim2026-07-06
One Medical notified the NH Attorney General of a breach affecting 125 NH residents. Unauthorized access occurred June 8-11, 2026, to a third-party file-storage system hosting archived data from One Medical Seniors (formerly Iora Health). Discovery was June 13, 2026. PHI, SSNs, and demographic data were accessed. Notifications mailed June 29, 2026, offering 2 years of credit monitoring.
- Washington State AGas victim2026-07-03
One Medical experienced a cyberattack on a third-party file-storage system used for archived patient data from One Medical Seniors (formerly Iora Health). Unauthorized access occurred between June 8-11, 2026. The incident affected 16,884 Washington residents, exposing PHI, SSNs, and billing info. One Medical revoked access, rotated credentials, and offered 2 years of credit monitoring.
- TEXASHHS OCRas victim2022-08-25
One Medical, Inc. (TX) reported to HHS on 2022-08-25 a Theft breach affecting 1,009 individuals. Breached information was located on Paper/Films. An employee inappropriately acquired PHI including names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and other treatment information. The covered entity sanctioned the responsible employee, notified affected individuals and the media, provided complimentary credit monitoring, and implemented additional physical safeguards.