Apria Healthcare

Organization

Apria Healthcare

Source

California AG · source record

Date reported

Oct 20, 2016

Date(s) of breach

Friday, August 5, 2016

Residents affected

Not published by this source

Data exposed

Medical / health information Date of birth Email address Name

Notice letter

Sample notice (PDF)

Discovered

Aug 5, 2016, as stated in the letter

"On August 5, 2016, Apria Healthcare discovered that the email account of an Apria Healthcare employee was subject to unauthorized access and immediately launched an internal investigation and retained third-party forensic experts to assi..."

Days to notice

76 days from discovery (Aug 5, 2016) to the California record (Oct 20, 2016). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period

Offered in the letter

12 months of credit or identity monitoring through Experian

Third party

The letter attributes the incident to a vendor or service provider

First seen by BreachTally

2026-10-30 16:18 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.