Skip to content
Breaches.

Advocate Aurora Health

Disclosed Jul 16, 20215 years ago3,000,000 affectedConfirmed

Official notice

The covered entity (CE), Advocate Aurora Health, reported that web tracking technology transferred the protected health information (PHI) of 3,000,000 individuals to unauthorized recipients. OCR has consolidated this breach report into an existing compliance review of the CE.

What is known

People affected3,000,000 (as reported to HHS)
DisclosedJul 16, 2021
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): Advocate Aurora Health (Healthcare Provider, WI)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalJul 16, 202168,707
HHS archivetotalDec 28, 20211,729
HHS archivetotalOct 14, 20223,000,000

Other breaches at Advocate Aurora Health

BreachAffected
Disclosed Feb 19, 2020Feb 19, 20206 years agoInsider176K
History of this record
  • 2026-09-25 · disclosed: 2021-12-28 to 2021-07-16 · backfill source
  • 2026-09-25 · disclosed: 2022-10-14 to 2021-12-28 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Advocate Aurora Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.