Healthcare Provider · Archived
Valley Family Health Care
4,300 individuals · submitted January 12, 2026
About this report
The covered entity (CE), Valley Family Health Care, reported that a subcontractor of the CE’s business associate (BA) experienced a cyber-attack that compromised the protected health information (PHI) of 4,300 individuals. The PHI involved clinical and financial information. The CE notified HHS, affected individuals, the media, and the subcontractor will also be notifying individuals and the media on the CE’s behalf. OCR provided technical assistance regarding the HIPAA Rules.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Valley Family Health Care
- State
- ID
- Entity type
- Healthcare Provider
- Individuals affected
- 4,300
- Submission date
- January 12, 2026
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Electronic Medical Record
- Business associate present
- No
- OCR status
- Archived
More breach reports in ID
ID · Aug 25, 2026
Shoshone Medical Center
553 individuals
ID · Jul 21, 2026
Boundary Regional Community Health Center dba Kaniksu Community Health
88,000 individuals
ID · Jun 23, 2026
Advocate Warriors LLC
750 individuals
ID · Jun 4, 2026
Minidoka Memorial Hospital
22,000 individuals
ID · Feb 27, 2026
Lakeside Pediatrics & Adolescent Medicine, PLLC
34,154 individuals
ID · Jan 15, 2026
Community Health Clinics, Inc. dba Terry Reilly Health Services
5,421 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals