Breachesby GlyphDuPage Medical Group
Disclosed Aug 30, 2021655,384 affectedConfirmed
The covered entity (CE), DuPage Medical Group, reported that it was the subject of a cyber-attack that affected the protected health information (PHI) of 655,384 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 655,384 (as reported to HHS) |
|---|---|
| Disclosed | Aug 30, 2021 |
| Happened | Jul 12, 2021 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
655355 to 655384by backfillSource
empty to The covered entity (CE), DuPage Medical Group, reported that it was the subject of a cyber-attack that affected the protected health information (PHI) of 655,384 individuals. The PHI involved included names, addresses, dates of birth, Sociaby backfillSource
empty to organizationby backfillSource
empty to 655355by backfillSource
2021-09-01 to 2021-08-30by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.