Topy America Inc.
ent_6888f1c39f96a99463a87c16
Disclosures
4
HHS OCR · State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,827
nationwide · HHS OCR KY
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Topy America Inc.
- Normalized
- topy america— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- KENTUCKYHHS OCRas victim2025-03-14
Topy America Inc. (Health Plan, KY) reported to HHS OCR on 2025-03-14 a Hacking/IT Incident affecting 1,827 individuals. Breached PHI was located on a Network Server and included demographic, clinical, and financial information. The CE notified HHS, affected individuals, and the media, posted a substitute notice, offered free credit monitoring, and implemented administrative, technical, and security safeguards. No business associate was present.
- Massachusetts State AGas victim2025-03-14
Topy America Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-14. 1 Massachusetts residents were affected.
- Montana State AGas victim2025-03-14
Topy America, Inc. notified Montana residents of a cybersecurity incident where an unauthorized actor accessed the network between Dec 8, 2024, and Jan 11, 2025. The breach was detected on Jan 13, 2025. Personal information, including names and government IDs, was exfiltrated. The company secured its network, engaged in an investigation, and provided Kroll identity monitoring services to affected individuals.
- Illinois State AGas victim2025-03-01
TOPY AMERICA, INC. filed a data-breach notice with the Illinois Attorney General in March 2025 (case 25-03-023). The register records the breach as discovered on January 11, 2025. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.