CareCentrix
ent_63cf203c8c333b5335ce2219
Disclosures
2
HHS OCR · State AG · 2 jurisdictions
Incidents
—
no linked incident in sample
Max affected reported
467,621
as filed · HHS OCR FEDERAL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- CareCentrix
- Normalized
- carecentrix— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- carecentrix.com
Disclosure history (2)newest first
- FEDERALHHS OCRas victim2019-07-11
CareCentrix, Inc. reported that its business associate, American Medical Collection Agency, discovered unauthorized access to its web payment portal. The breach affected 467,621 individuals and the protected health information (PHI) involved included identification numbers, insurance information, names, dates of birth, addresses, phone numbers, social security numbers, and financial information. CareCentrix notified all affected individuals and the media, and dissolved its business associate relationship.
- ⛰️New Hampshire State AGas victim2016-03-21
CareCentrix, Inc. notified the New Hampshire Attorney General's office of a cybersecurity incident involving unauthorized access to its systems. The breach affected approximately 10,000 New Hampshire residents, exposing personal information including names, Social Security numbers, and dates of birth. The incident involved the use of stolen credentials to access customer data. CareCentrix engaged forensic investigators and law enforcement, and sent notifications to affected individuals.