Affordacare Urgent Care Clinics
Disclosed Mar 27, 20206 years ago57,411 affectedConfirmed
The covered entity (CE), Affordacare Urgent Care Clinics, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 57,411 individuals. The ePHI involved included names, addresses, telephone numbers, dates of birth, health insurance information, and treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE retrained its employees and implemented additional administrative, technical, and security safeguards to better protect its ePHI.
What is known
| People affected | 57,411 (as reported to HHS) |
|---|---|
| Disclosed | Mar 27, 2020 |
| Happened | Feb 1, 2020 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: Affordacare Urgent Care Clinicsin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Affordacare Urgent Care Clinicsmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Affordacare Urgent Care Clinics (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 27, 2020 | 23 |
| Maine AGresidents of ME | Mar 31, 2020 | 5 |
| HHS archivetotal | Mar 31, 2020 | 57,411 |
| Maine AGresidents of ME | Apr 9, 2020 | 5 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn"] to ["names","ssn","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 55338 to 57411 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Affordacare Urgent Care Clinics, reported that it was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 57,411 individuals. The ePHI involved included names, addre · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn"] · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.