Fairbanks Hospital
Disclosed Jan 27, 201610 years ago12,994 affectedConfirmed
The covered entity (CE), Fairbanks Hospital, reported that the protected health information (PHI) of 12,994 individuals was viewable by employees not authorized to do so. The PHI involved included names, dates of birth, addresses, Social Security numbers, health insurance information, diagnoses, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE implemented additional technical and security safeguards to better protect its data. OCR obtained assurances that the CE implemented the corrective actions noted.
What is known
| People affected | 12,994 (as reported to HHS) |
|---|---|
| Disclosed | Jan 27, 2016 |
| Happened | Jun 1, 2015 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2016 data breach report: Fairbanks Hospitalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Fairbanks Hospital (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jan 27, 2016 | 749 |
| HHS archivetotal | Dec 16, 2016 | 12,994 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 805 to 12994 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Fairbanks Hospital, reported that the protected health information (PHI) of 12,994 individuals was viewable by employees not authorized to do so. The PHI involved included names, dates of birth, addresses, Social Se · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.