Dr Amy Woodruff
Disclosed Oct 5, 20187 years ago10,862 affectedConfirmed
Dr. Amy Woodruff, the covered entity (CE), reported that her practice was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 10,862 individuals. The ePHI involved included names, mailing addresses, dates of birth, Social Security Numbers, clinical diagnoses, and medical conditions. The CE notified HHS, affected individuals, and the media. In response to the breach incident, the CE implemented new administrative and technical safeguards and retrained its staff to better protect the privacy of ePHI.
What is known
| People affected | 10,862 (as reported to HHS) |
|---|---|
| Disclosed | Oct 5, 2018 |
| Happened | Aug 8, 2018 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Health, Insurance, Dates of birth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2018 data breach report: Dr Amy Woodruffin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Dr. Amy Woodruffmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Dr. Amy Woodruff (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Oct 5, 2018 | 2 |
| HHS archivetotal | Oct 7, 2018 | 10,862 |
| Maine AGresidents of ME | Oct 22, 2018 | 2 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 10862 · backfill source
- 2026-09-25 · summary: empty to Dr. Amy Woodruff, the covered entity (CE), reported that her practice was the victim of a ransomware attack that affected the electronic protected health information (ePHI) of 10,862 individuals. The ePHI involved included names, mailing ad · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","health","insurance","dob"] · backfill source
- 2026-09-25 · occurred: empty to 2018-08-08 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.