Beacon Health System
Disclosed May 22, 201511 years ago306,789 affectedConfirmed
Phishing attack on staff email exposes data of 306,789 Indiana patients
Several Beacon Health employees fell for phishing emails, giving attackers access to mailboxes holding names, Social Security numbers, drivers license numbers and clinical data of 306,789 people.
What is known
| People affected | 306,789 (as reported by the organization) |
|---|---|
| Disclosed | May 22, 2015 |
| Happened | Nov 19, 2013 |
| Attack | Phishing |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Government IDs, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Beacon Health Systemoag.ca.gov · Official notice | Official notice |
| HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individualsocrportal.hhs.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 22, 2015 | 306,789 |
| HHS archivetotal | May 22, 2015 | 306,789 |
| California AGresidents of CA | May 29, 2015 |
Other breaches at Beacon Health System
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 10, 2023Mar 10, 20233 years agoInsider | Mar 10, 20233 years ago | Insider | Healthcare | Confirmed | 3,304 |
| Disclosed Aug 7, 2020Aug 7, 20206 years ago | Aug 7, 20206 years ago | Not stated | Healthcare | Confirmed | 25 |
| Disclosed Jun 1, 2018Jun 1, 20188 years ago | Jun 1, 20188 years ago | Not stated | Healthcare | Confirmed | 141 |
| Disclosed May 26, 2017May 26, 20179 years agoInsider | May 26, 20179 years ago | Insider | Healthcare | Confirmed | 1,239 |
History of this record
- 2026-09-25 · attack: unknown to phishing · seed source
- 2026-09-25 · data_types: [] to ["names","addresses","dob","ssn","government-id","health"] · seed source
- 2026-09-25 · records_basis: empty to organization · seed source
- 2026-09-25 · records: empty to 306789 · seed source
- 2026-09-25 · disclosed: 2015-05-29 to 2015-05-22 · seed source
- 2026-09-25 · summary: empty to Several Beacon Health employees fell for phishing emails, giving attackers access to mailboxes holding names, Social Security numbers, drivers license numbers and clinical data of 306,789 people. · seed source
- 2026-09-25 · title: empty to Phishing attack on staff email exposes data of 306,789 Indiana patients · seed source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.