The covered entity (CE), Deaconess Health System, reported that its business associate (BA) experienced a breach of its network that affected the protected health information of 8,941 individuals. The PHI involved clinical and demographic information. The CE notified HHS, the media, and the affected individuals. In response to the breach, the CE and BA implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
People affected
203,874 (as reported by the organization)
Disclosed
Mar 20, 2026
Discovered
Jun 26, 2026
Happened
Dec 2, 2025
Attack
Hacking
Data exposed
Social Security numbers, Health, Insurance, Dates of birth, Names
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · disclosed: 2026-08-07 to 2026-03-20 · backfill source
2026-09-25 · summary: empty to The covered entity (CE), Deaconess Health System, reported that its business associate (BA) experienced a breach of its network that affected the protected health information of 8,941 individuals. The PHI involved clinical and demographic i · backfill source
