CarePointe ENT
Disclosed Aug 23, 20215 years ago48,742 affectedConfirmed
The covered entity (CE), CarePointe ENT, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 48,742 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses and conditions, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, local law enforcement, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect its PHI.
What is known
| People affected | 48,742 (as reported by the organization) |
|---|---|
| Disclosed | Aug 23, 2021 |
| Happened | Jun 25, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: CarePointe ENTin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): CarePointe ENT (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Aug 23, 2021 | 45,002 |
| HHS archivetotal | Aug 23, 2021 | 48,742 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), CarePointe ENT, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 48,742 individuals. The PHI involved included names, addresses, dates of birth, Socia · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.