Every public data breach

44 disclosed this week · 26,355 on record

Erlanger Health

Disclosed Apr 10, 20254,237 affectedConfirmed

Official notice

The covered entity (CE), Erlanger Health, reported that it sent data to a billing partner that mistakenly contained the protected health information (PHI) of patients who were not served by the billing partner. According to the breach report, the breach affected approximately 4,237 individuals. The PHI involved clinical and treatment information. The CE notified HHS, the media, and the affected individuals. In its mitigation efforts, the CE reviewed and adjusted the settings on its secure data feeds to prevent a reoccurrence. OCR provided technical assistance to the CE regarding the HIPAA Rules.

What is known

People affected4,237 (as reported to HHS)
DisclosedApr 10, 2025
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

Other breaches at Erlanger Health

History of this record
disclosed2026-09-25
2025-05-28 to 2025-04-10by backfillSource
disclosed2026-09-25
2026-07-01 to 2025-05-28by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Erlanger Health