Skip to content

Beacon Health System

Disclosed Mar 10, 20233 years ago3,304 affectedConfirmed

Official notice

The covered entity (CE), Beacon Health System, reported that an employee impermissibly accessed the protected health information (PHI) of 3,304 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses, lab results, medications, and financial and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained on the requirements to protect and secure PHI.

What is known

People affected3,304 (as reported to HHS)
DisclosedMar 10, 2023
HappenedAug 31, 2023
AttackInsider
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
HHS archivetotalMar 10, 20233,304
Indiana AGresidents of INSep 25, 20232

Other breaches at Beacon Health System

BreachAffected
Disclosed Aug 7, 2020Aug 7, 20206 years ago25
Disclosed Jun 1, 2018Jun 1, 20188 years ago141
Disclosed May 26, 2017May 26, 20179 years agoInsider1,239
Phishing attack on staff email exposes data of 306,789 Indiana patientsMay 22, 201511 years agoPhishing307K
History of this record
  • 2026-09-25 · attack: unknown to insider · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: organization to hhs · backfill source
  • 2026-09-25 · records: 2 to 3304 · backfill source
  • 2026-09-25 · disclosed: 2023-09-25 to 2023-03-10 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Beacon Health System, reported that an employee impermissibly accessed the protected health information (PHI) of 3,304 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Beacon Health System

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.