Hope Health Systems
Disclosed Nov 21, 20223 years ago10,887 affectedConfirmed
The covered entity (CE), Hope Health Services, reported that it experienced a malware incident that affected the protected health information (PHI) of 9,972individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. As part of its mitigation efforts, the CE offered free credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 10,887 (as reported by the organization) |
|---|---|
| Disclosed | Nov 21, 2022 |
| Happened | Jun 10, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Hope Health Systemsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hope Health Systems (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Nov 21, 2022 | 1 |
| HHS archivetotal | Nov 21, 2022 | 9,972 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Hope Health Services, reported that it experienced a malware incident that affected the protected health information (PHI) of 9,972individuals. The PHI involved included names, addresses, dates of birth, Social Secu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.