Elizabeth Family Health
Disclosed Nov 22, 20196 years ago28,375 affectedConfirmed
Elizabeth Family Health, the covered entity (CE), reported that it was the victim of a burglary and that the assailant stole numerous items including an unencrypted backup server that contained the electronic protected health information (ePHI) of 28,375 individuals. The ePHI involved included names, birthdates, and Social Security numbers. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE implemented additional physical, administrative, and technical safeguards to better protect its sensitive data.
What is known
| People affected | 28,375 (as reported by the organization) |
|---|---|
| Disclosed | Nov 22, 2019 |
| Happened | Sep 23, 2019 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2019 data breach report: Elizabeth Family Healthin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Elizabeth Family Health (Healthcare Provider, CO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Nov 22, 2019 | 28 |
| HHS archivetotal | Nov 22, 2019 | 28,375 |
History of this record
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Elizabeth Family Health, the covered entity (CE), reported that it was the victim of a burglary and that the assailant stole numerous items including an unencrypted backup server that contained the electronic protected health information (e · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.