HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Dec. 22, 2025.
- Organization as reported
- Variety Care, OK
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Dec. 22, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9066, row:205)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Variety Care, reported that its business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 17,163 individuals. The PHI involved demographic and clinical information. The CE notified HHS and affected individuals; the subcontractor notified the media on the CE’s behalf. OCR provided technical assistance regarding the HIPAA Rules.