East Adams Rural Healthcare
Disclosed Oct 21, 20241 year ago13,318 affectedConfirmed
The covered entity (CE), East Adams Rural Healthcare, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of approximately 13,206 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and social security numbers, claims and financial information, diagnoses, conditions, lab results, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented several administrative and technical safeguards.
What is known
| People affected | 13,318 (as reported by the organization) |
|---|---|
| Disclosed | Oct 21, 2024 |
| Discovered | Sep 12, 2024 |
| Happened | Sep 7, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: East Adams Rural Healthcareatg.wa.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: East Adams Rural Healthcarein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): East Adams Rural Healthcare (Healthcare Provider, WA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 21, 2024 | 13,206 |
| Indiana AGresidents of IN | Aug 7, 2025 | 8 |
| Washington AGresidents of WA | Aug 11, 2025 | 8,896 |
History of this record
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2025-08-07 to 2024-10-21 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), East Adams Rural Healthcare, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of approximately 13,206 individuals. The PHI involved included names, addresses, dates · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 13318 · backfill source
- 2026-09-25 · disclosed: 2025-08-11 to 2025-08-07 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.