AdventHealth Medical Group
Disclosed Jan 25, 20197 years ago42,161 affectedConfirmed
The covered entity (CE), AdventHealth Medical Group, reported that it was the victim of a cyber-attack involving the electronic protected health information (ePHI) of 42,161 individuals. The ePHI involved included names, dates of birth, addresses, health insurance information, Social Security numbers, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional technical and security safeguards to prevent future incidents of this nature.
What is known
| People affected | 42,161 (as reported to HHS) |
|---|---|
| Disclosed | Jan 25, 2019 |
| Discovered | Dec 27, 2018 |
| Happened | Aug 1, 2017 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Maine Attorney General breach notice archive: AdventHealth Medical Groupmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): AdventHealth Medical Group (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Maine AGresidents of ME | Jan 25, 2019 | 14 |
| HHS archivetotal | Feb 5, 2019 | 42,161 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 29621 to 42161 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), AdventHealth Medical Group, reported that it was the victim of a cyber-attack involving the electronic protected health information (ePHI) of 42,161 individuals. The ePHI involved included names, dates of birth, add · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Maine AG), confirmed by Maine AG. Record counts are as reported. Not legal advice.