How many were affected by ADPI-Intermedix breach: help track this breach

Posted on by Dissent

As I had done with the Epsilon breach on DataBreaches.net, I’ve decided to devote a blog post to tracking organizations affected by the Advanced Data Processing (ADPI)  breach.  The San Francisco Chronicle reported that there were “27 agencies in 17 states whose patients may have had personal information stolen.” As you’ll see below, that does not appear to match what we know at this time. ADPI had informed me that the 17 states include: Arizona, California, Florida, Georgia, Kansas, Kentucky, Massachusetts, Maryland, Missouri, North Carolina, Nebraska, Nevada, New Mexico, Ohio, Oklahoma, Tennessee and Texas.  At the very least, we’re missing the affected Nevada organization or agency and we may be missing other organizations within some of these states.

Use the comments section below to let me know about organizations or significant details  to be added to this list. If you can, please provide links to the media sources you are relying on. We don’t need multiple media sources on each entity, so if there’s already a good media link, we don’t need more.  Right now, most of the links are to substitute notices/press releases that simply name the agencies, so we’re missing a lot of details.  If you have a breach notification letter that we haven’t seen already that you can scan in and share, that would be great, too. 

For organizations named in the media, press releases, or notifications to states, I am providing a link to the source. Where the number affected have been reported, I’m including links to that, too. The following list is in alphabetical order:


Category: Health Data