Still in the dark: A “500 marker” is updated, but too many still aren’t. Is HHS doing anything about this??

LockBit3.0 added Redwood Coast Regional Center to its leak site after a March 6 incident; RCRC notified HHS on May 3 and initially reported 500 affected patients but later updated the count to 24,937, with exposed PHI including names, contact and insurance details, medical information, and Social Security numbers. The report highlights widespread delays and ambiguities in HHS breach reporting (many cases still showing '500/501' placeholders), raising concerns that thousands of patients may remain uninformed about exposures and potential misuse of their data and urging HHS to require timelier, more transparent updates.