Consociate Health
ent_a20818943c683aba51a50567
Disclosures
3
HHS OCR enforcement · HHS OCR · State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
48,583
nationwide · HHS OCR IL
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Consociate Health
- Normalized
- consociate health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- consociatehealth.com
Disclosure history (3)newest first
- FEDERALHHS OCR enforcementas victim2025-12-18
HHS OCR settled with Consociate, Inc. (d/b/a Consociate Health) regarding a 2021 ransomware attack resulting from a phishing compromise. The business associate failed to conduct a thorough risk analysis. Consociate agreed to pay $225,000 and implement a Corrective Action Plan including risk analysis, risk management, policy updates, and workforce training.
- ILLINOISHHS OCRas victim2021-11-03
Consociate, Inc. reported to HHS on 2021-11-03 a Hacking/IT Incident affecting 48583 individuals. Breached information located on Network Server.
- Indiana State AGas victim2021-11-03
Consociate Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2020-07-16 and was reported on 2021-11-03. 1,379 Indiana residents were affected. 48,583 individuals affected in total.