Case file: Karen Horney Clinic

Name: Karen Horney Clinic data breach case file
Creator: BreachTally

Every government filing on this incident, the dates as stated, and the days to notice against each state's statute. Built from the records on Nov 15, 2026, agency link on every row. Not legal advice.

Buy the Word document, US$49 Every case file with a plan All filings by Karen Horney Clinic

One payment, no subscription. The document is emailed at once and its link keeps it current for 30 days as more states file.

The incident

Breach window: Not stated in the filings
Discovered: No letter on file to read
State and federal records: 1 filing, Nov 10, 2026
Residents counted: 3 in 1 state (MA), latest filing per state
Everyone affected: No filing gives a total
Information exposed: Social Security number, Medical / health information
Offered to those affected: No letter on file to read
Third party named: No letter on file to read

Filings

Agency	Record date	People	In total	Days to notice	Links
Massachusetts Massachusetts OCABR	Nov 10, 2026	3		No dates to count between	Record

People is the count the filing gives, residents of the state unless marked total. Days to notice runs from the discovery date the letter states, or from the end of the breach window when no letter states one, to the date on the state's first record of the incident. "Over" marks a count past the days the state's statute allows for notice to residents. The statute's trigger is a question of fact, the days are arithmetic.

Residents by state

State	Residents	Share of the total	Record
Massachusetts	3		Nov 10, 2026

The states above count 3 people. No filing gives a total to compare with.

The California statutory range

California: no record on file for this incident. The Attorney General receives a sample notice only when more than 500 California residents are notified (Cal. Civ. Code § 1798.82(f)). Cal. Civ. Code § 1798.150 lets a consumer recover US$107 to US$799 per consumer per incident, or actual damages if greater, when personal information of the kinds the statute names is taken as a result of a business's failure to maintain reasonable security. Those are the amounts in force since Jan 1, 2025. The filings list Social Security numbers and medical information, which are among the kinds the statute names.

In the Word document: the conditions the statute sets and what applies to medical information. This file, US$49 or every file with a plan.

Statutes: Cal. Civ. Code § 1798.150, amounts as adjusted by the California Privacy Protection Agency. Not legal advice.

The statutes

Massachusetts: no fixed period to notify residents from knowledge or reason to know of the breach, Mass. Gen. Laws ch. 93H, § 3. Attorney General and OCABR as soon as practicable and without unreasonable delay, every breach.

Sources and method

Records as published by Massachusetts OCABR. Letter facts (discovery date, monitoring, third party) are read from the consumer letter the agency posted, 0 letters read for this incident, and quoted so you can check them. Texas and HHS publish no letters. First-seen times on each record page. Spot an error? Email support@breachtally.com with this page link.