Chattanooga Heart Institute
Disclosed Jul 28, 20233 years ago545,491 affectedConfirmed
The covered entity (CE), Chattanooga Heart Institute, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 595,491 individuals. The affected information included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, medications, and other treatment information. The CE provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its website. In response to the breach, the CE reset all passwords and implemented a series of improved technical safeguards.
What is known
| People affected | 545,491 (as reported to HHS) |
|---|---|
| Disclosed | Jul 28, 2023 |
| Happened | Mar 8, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-03-27 The Chattanooga Heart Institute Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-10-06 The Chattanooga Heart Institute Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Chattanooga Heart Institutein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Chattanooga Heart Institute (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jul 28, 2023 | 207 |
| HHS archivetotal | Jul 28, 2023 | 545,491 |
| Vermont AGresidents of VT | Oct 6, 2023 | |
| Vermont AGresidents of VT | Mar 27, 2024 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 170450 to 545491 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Chattanooga Heart Institute, reported that it experienced a ransomware attack that affected the protected health information (PHI) of 595,491 individuals. The affected information included names, addresses, dates of · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 170450 · backfill source
- 2026-09-25 · disclosed: 2023-10-06 to 2023-07-28 · backfill source
- 2026-09-25 · occurred: empty to 2023-03-08 · backfill source
- 2026-09-25 · disclosed: 2024-03-27 to 2023-10-06 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.