Epic Care
Disclosed Jun 8, 20215 years ago11,407 affectedConfirmed
The covered entity (CE), Epic Care, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 9,000 individuals. The ePHI involved included Social Security numbers, diagnoses, and treatment information. The CE notified HHS, affected individuals, and the media. Following the breach, the CE offered complimentary identity and credit monitoring services and terminated its business relationship with the BA.
What is known
| People affected | 11,407 (as reported by the organization) |
|---|---|
| Disclosed | Jun 8, 2021 |
| Happened | Apr 2, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Epic Carein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Epic Care (Healthcare Provider, CA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jun 8, 2021 | 2 |
| HHS archivetotal | Jun 9, 2021 | 9,000 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Epic Care, reported that its business associate (BA) experienced a ransomware attack that affected the electronic protected health information (ePHI) of 9,000 individuals. The ePHI involved included Social Security · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.