Hennepin Healthcare System
Disclosed Jul 25, 20197 years ago820 affectedConfirmed
Hennepin Healthcare System, the covered entity (CE), reported that an employee of its business associate (BA), Nemadji, was the victim of an email phishing scheme. This breach affected 814 individuals and the protected health information (PHI) involved included names, dates of birth, treatment information, and financial data. The CE, in conjunction with the BA, notified HHS, affected individuals, the media, and provided substitute notice. The CE also offered complimentary identity theft monitoring services.
What is known
| People affected | 820 (as reported to HHS) |
|---|---|
| Disclosed | Jul 25, 2019 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Hennepin Healthcare System (Healthcare Provider, MN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 25, 2019 | 820 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.