Outcomes

Outcomes One, Inc., a Florida-based business associate, reported to HHS on 2025-09-23 a Hacking/IT Incident (email phishing) affecting 257,481 individuals. An employee was targeted in an email phishing scheme, exposing PHI including names, dates of birth, medications, and other treatment information. Breached information was located in Email. The BA notified HHS, affected covered entities, individuals, the media, and provided substitute notice. Additional administrative, technical, and security safeguards were implemented and workforce members were retrained.

Affected (this filing): 257,481

Outcomes One, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2025-09-23. The breach occurred on 07/01/2025. 14 Montana residents were affected.

Affected (this filing): 14

Outcomes One, Inc. experienced a phishing incident on July 1, 2025, resulting in unauthorized access to an employee's email account. The attacker accessed files and emails containing demographic and health insurance information for some individuals. Social Security numbers were not involved. Outcomes secured the account, engaged third-party investigators, and implemented enhanced security safeguards and employee training.

Outcomes One, Inc. based in Orlando, Florida, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-09-10 and reported on 2025-10-24. 18,299 Texas residents were affected. 256,031 individuals affected in total. Types of information involved: Name of individual;Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Affected (this filing): 18,299