Blue Springs Family Care
Disclosed Jul 10, 20188 years ago44,979 affectedConfirmed
The covered entity (CE), Blue Springs Family Care, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 44,979 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and health insurance information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE offered free credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were also retrained on obligations to protect and secure PHI.
What is known
| People affected | 44,979 (as reported to HHS) |
|---|---|
| Disclosed | Jul 10, 2018 |
| Discovered | May 12, 2018 |
| Happened | May 12, 2018 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Blue Springs Family Carejustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2018 data breach report: Blue Springs Family Carein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Blue Springs Family Care (Healthcare Provider, MO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 10, 2018 | 44,979 |
| Indiana AGresidents of IN | Jul 16, 2018 | 11 |
| Oregon DOJresidents of OR | Jul 19, 2018 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 44977 to 44979 · backfill source
- 2026-09-25 · disclosed: 2018-07-16 to 2018-07-10 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Blue Springs Family Care, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 44,979 individuals. The PHI involved included names, addresses, dates of birth, So · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 44977 · backfill source
- 2026-09-25 · disclosed: 2018-07-19 to 2018-07-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.