Christiana Spine Center
Disclosed May 31, 20224 years ago20,870 affectedConfirmed
Christiana Spine Center, the covered entity (CE) reported that an unauthorized third-party gained access to its network and accessed or acquired the protected health information (PHI) of 20,870 individuals. The PHI involved included demographic and clinical information. OCR provided technical assistance regarding the HIPAA Rules. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data.
What is known
| People affected | 20,870 (as reported to HHS) |
|---|---|
| Disclosed | May 31, 2022 |
| Discovered | Feb 25, 2022 |
| Happened | Feb 25, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Notice letter filed with the Delaware DOJ: Christiana Spine Centerattorneygeneral.delaware.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Christiana Spine Center (Healthcare Provider, DE)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | May 31, 2022 | 1,000 |
| HHS archivetotal | Jun 9, 2022 | 20,870 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 3500 to 20870 · backfill source
- 2026-09-25 · summary: empty to Christiana Spine Center, the covered entity (CE) reported that an unauthorized third-party gained access to its network and accessed or acquired the protected health information (PHI) of 20,870 individuals. The PHI involved included demogra · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.