Valley Family Health Care (ID) reported to HHS on 2026-01-12 an Unauthorized Access/Disclosure affecting 4,300 individuals. A subcontractor of the CE's business associate experienced a cyber-attack that compromised PHI stored in Electronic Medical Records. PHI involved clinical and financial information. The CE notified HHS, affected individuals, and the media; the subcontractor will also notify on the CE's behalf. OCR provided technical assistance regarding the HIPAA Rules.
Affected (this filing): 4,300