Covenant Surgical Partners breach affects 88,609 patients
Covenant Surgical Partners, Inc., a business associate in Texas, reported a hacking/IT incident affecting 88,609 individuals. The breach involved data stored on a network server. The filing was submitted to HHS OCR on 05/28/2025. This submission date marks when the report was filed, not when the incident occurred. As a business associate, Covenant Surgical Partners has specific obligations under HIPAA. Covered entities working with this vendor should review their business associate agreements and ensure their own risk assessments are current. The incident highlights the importance of robust cybersecurity measures for third-party service providers handling protected health information.