Where does the TapestryHealth case file come from?

Every entry is taken from the breach report TapestryHealth lodged with the California Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: TapestryHealth Data Breach

This file collects the dated facts on record for the TapestryHealth incident. The state report is dated December 22, 2025. The incident itself is dated November 6, 2024.

Timeline

411 days separate the incident date from the date it was reported.

November 6, 2024Incident dateWhen the filing says the breach took place.
December 22, 2025Report filed in CaliforniaDate the notice was lodged with the California Attorney General.

Case facts

Filing state: California
Date reported: December 22, 2025
Incident date: November 6, 2024
Receiving office: California Attorney General

Case notes

TapestryHealth, a company operating in California, has disclosed a data security incident that potentially compromised personal information. The breach occurred on November 6, 2024, leading to the exposure of certain data.

The specific nature of the incident, including the breach type and the exact categories of personal information involved, has not been detailed in public filings. Likewise, the total number of individuals affected by this event has not been specified.

Following the discovery of the incident, TapestryHealth submitted its official report to regulators on December 22, 2025. The company has indicated that an investigation into the circumstances and full impact of the data exposure is ongoing.

For those who may be affected, it is advisable to exercise caution and monitor personal accounts and financial statements closely for any suspicious activity. Consider reviewing credit reports and enabling multi-factor authentication on online accounts where available to enhance security.

This information is derived from public regulatory filings. As the investigation progresses, additional details may become available regarding the incident's specifics and any further recommended protective measures.

Questions about this case file

Where does the TapestryHealth case file come from?: Every entry is taken from the breach report TapestryHealth lodged with the California Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

California data breaches

Filing source: California Attorney General

Named in the TapestryHealth breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More California case files