HMC Healthworks

Disclosed Dec 9, 2020985 affectedConfirmed

HMC Healthworks, Inc., a business associate (BA), reported that several employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 985 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, medications prescribed, and health insurance information. The BA notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards to better protect its ePHI.

What is known

People affected	985 (as reported to HHS)
Disclosed	Dec 9, 2020
Happened	Sep 15, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2021 data breach report: HMC Healthworks

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): HMC Healthworks (Business Associate, FL)

Notices filed

Residents of INDec 9, 2020

Indiana AG15 people

TotalDec 11, 2020

HHS archive985 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

983 to 985by backfillSource

summary2026-09-25

empty to HMC Healthworks, Inc., a business associate (BA), reported that several employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 985 individuals. The ePHI involved included nby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about HMC Healthworks