Incident

Gryphon Healthcare reports third party breach exposing over 300k people


Learn More

Gryphon Healthcare, LLC is reporting a data breach affecting 393,358 individuals, following a third-party security incident involving one of its partner companies.

Gryphon Healthcare, LLC, based in Houston, Texas, offers a range of services to healthcare providers, including revenue cycle management, coding and compliance services, and consulting services.

Gryphon was alerted to suspicious activity on August 13, 2024, and an investigation revealed that unauthorized access had occurred on July 6, 2024. This breach exposed highly sensitive personal and health-related information of individuals for whom Gryphon provides medical billing services.

The breach exposed the following information:

  • Names
  • Dates of birth
  • Addresses
  • Social Security numbers
  • Health insurance information
  • Medical information
  • Prescription information
  • Medical record numbers
  • Dates of service
  • Diagnosis information
  • Provider information

On September 3, 2024, Gryphon Healthcare confirmed the breach and began notifying affected individuals on October 11, 2024. The company has taken steps to secure its systems and prevent further incidents.

Gryphon Healthcare reports third party breach exposing over 300k people