EMS Management and Consultants
Disclosed Aug 9, 20233 years ago223,598 affectedConfirmed
EMS Management and Consultants, a business associate (BA), reported that an employee mailed the protected health information (PHI) of 2,564 individuals to the wrong recipients. The PHI involved included names, addresses, treatment information, and financial information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional administrative safeguards to better protect PHI.
What is known
| People affected | 223,598 (as reported by the organization) |
|---|---|
| Disclosed | Aug 9, 2023 |
| Happened | May 30, 2023 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: EMS Management and Consultantsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): EMS Management and Consultants (Business Associate, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Aug 9, 2023 | 160 |
| HHS archivetotal | Aug 10, 2023 | 223,598 |
| HHS archivetotal | Dec 1, 2023 | 2,654 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to EMS Management and Consultants, a business associate (BA), reported that an employee mailed the protected health information (PHI) of 2,564 individuals to the wrong recipients. The PHI involved included names, addresses, treatment informati · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.