Atlantic General Hospital
Disclosed Mar 24, 20233 years ago132,817 affectedConfirmed
Atlantic General Hospital, the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 132,817 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, laboratory results, and clinical treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE strengthened its technical safeguards to increase its security posture.
What is known
| People affected | 132,817 (as reported to HHS) |
|---|---|
| Disclosed | Mar 24, 2023 |
| Discovered | Mar 6, 2023 |
| Happened | Jan 20, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Notice letter filed with the Delaware DOJ: Atlantic General Hospitalattorneygeneral.delaware.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-06-22 Atlantic General Hospital Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Atlantic General Hospitalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Atlantic General Hospital (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Mar 24, 2023 | 19,184 |
| Indiana AGresidents of IN | Mar 24, 2023 | 61 |
| HHS archivetotal | Mar 24, 2023 | 132,817 |
| Vermont AGresidents of VT | Jun 22, 2023 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names"] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 30704 to 132817 · backfill source
- 2026-09-25 · summary: empty to Atlantic General Hospital, the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 132,817 individuals. The PHI involved included names, addresses, dates of birth, So · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 30704 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-06-22-atlantic-general-hospital-data-breach-notice-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.