Ciox Health
ent_53b4a4c2c12d7902c727f6b8
Disclosures
23
State AG · HHS OCR · 10 jurisdictions
Multi-filing incidents
4
incidents joining 2+ filings here
Max affected reported
320,702
nationwide · HHS OCR AZ
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Ciox Health
- Normalized
- ciox health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (23)newest first
- Nebraska State AGas victim2025-02-11
Ciox Health, d/b/a Datavant Group, a health care entity filed a data breach notification with the Nebraska Attorney General. The breach was discovered on 2024-08-08 according to the AG's register. The breach is dated 2024-05-08. Nebraska residents were notified on 2025-02-11.
- Maine State AGas victim2025-02-11
Ciox Health LLC d/b/a Datavant Group reported a phishing incident affecting 49,454 individuals. Unauthorized access occurred May 8-9, 2024, via compromised email accounts. Data exposed included names, SSNs, financial accounts, driver's licenses, and health information. Datavant engaged forensic experts, implemented security safeguards, and offered 24 months of Kroll identity monitoring.
- New Hampshire State AGas victim2024-12-09
Ciox Health LLC (d/b/a Datavant Group) notified the NH AG of a phishing incident affecting 20 NH residents. Unauthorized access occurred May 8-9, 2024, via a phishing email targeting a single user's mailbox. Data potentially impacted included names, addresses, and Social Security numbers of minors. Datavant engaged forensic investigators, reset credentials, and offered Kroll identity monitoring services. Notifications were sent December 6, 2024.
- Vermont State AGas reporting2024-12-06
Datavant (dba Ciox Health) notified consumers of a phishing attack on May 8-9, 2024 that compromised a single user's mailbox. Impacted data included names, addresses, financial account info, government IDs, and health information. Datavant engaged forensic experts, secured systems, and provided 2 years of Kroll identity monitoring services.
- Indiana State AGas victim2024-12-06
Ciox Health LLC dba Datavant Group reported a data breach to the Indiana Attorney General. The breach occurred on 2024-05-08 and was reported on 2024-12-06. 171 Indiana residents were affected. 10,639 individuals affected in total.
- Massachusetts State AGas victim2024-12-06
Ciox Health LLC, d/b/a Datavant Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-06. 18 Massachusetts residents were affected.
- Illinois State AGas victim2024-12-01
CIOX HEALTH LLC, DBA. DATAVANT GROUP filed a data-breach notice with the Illinois Attorney General in December 2024 (case 24-12-005). The register records the breach as discovered on May 8, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- ARIZONAHHS OCRas victim2024-10-07
Ciox Health LLC, d/b/a Datavant Group reported to HHS on 2024-10-07 a Hacking/IT Incident affecting 320702 individuals. Breached information located on Email. Business Associate present.
- Massachusetts State AGas victim2022-01-18
Ciox Health, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-01-18. 172 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2022-01-18
Ciox Health, LLC notified Montana residents that an unauthorized person accessed an employee's email account between June 24 and July 2, 2021, potentially downloading emails and attachments containing limited patient information. Ciox discovered the incident on September 24, 2021, and confirmed the scope on November 2, 2021. The data involved names and provider names; SSNs and financial data were excluded. Ciox is strengthening email security and providing enhanced cybersecurity training.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-350). The register records the breach as discovered on December 30, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-274). The register records the breach as discovered on April 18, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-272). The register records the breach as discovered on April 18, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-032). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-060). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-077). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-170). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-269). The register records the breach as discovered on February 22, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-027). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- Illinois State AGas victim2022-01-01
CIOX HEALTH LLC filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-271). The register records the breach as discovered on April 18, 2022. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GEORGIAHHS OCRas victim2021-12-30
Ciox Health reported to HHS on 2021-12-30 a Hacking/IT Incident affecting 43,033 individuals. Breached information located on Email. An employee was victim of an email phishing scheme compromising PHI including names, DOB, SSN, driver's license, and health insurance info. The CE implemented safeguards and retrained staff.
- Montana State AGas victim2021-12-30
Ciox Health LLC notified Montana residents of a security incident where an unauthorized person accessed an employee's email account between June 24 and July 2, 2021. The access was likely a result of phishing emails sent by the attacker for unrelated purposes. The incident involved limited patient information, specifically names and provider names. Ciox strengthened email security and provided enhanced cybersecurity training.
- Illinois State AGas victim2021-01-01
CIOX HEALTH filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-535). The register records the breach as discovered on July 2, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.