Family Tree Health Clinic
Disclosed Jun 19, 20179 years ago13,402 affectedConfirmed
Family Tree Health Clinic, the covered entity (CE), reported that a ransomware attack on its computer system resulted in the system being encrypted and data held for ransom. The CE determined that the demographic, financial, and clinical information of 13,402 individuals was involved in the breach. The CE provided breach notification to HHS, affected individuals and the media. The CE also implemented technical safeguards, updated procedures, and retrained its staff. OCR obtained assurances that the CE implemented the corrective actions noted above.
What is known
| People affected | 13,402 (as reported by the organization) |
|---|---|
| Disclosed | Jun 19, 2017 |
| Happened | Apr 24, 2017 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2017 data breach report: Family Tree Health Clinicin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Family Tree Health Clinic (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jun 19, 2017 | 3 |
| HHS archivetotal | Jun 19, 2017 | 13,402 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Family Tree Health Clinic, the covered entity (CE), reported that a ransomware attack on its computer system resulted in the system being encrypted and data held for ransom. The CE determined that the demographic, financial, and clinical in · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.