Hospital Authority of Valdosta and Lowndes County Georgia
Disclosed Jan 12, 20224 years ago41,692 affectedConfirmed
The covered entity (CE), Hospital Authority of Valdosta and Lowndes County Georgia, reported that an employee impermissibly accessed and downloaded the protected health information (PHI) of 41,692 individuals to a USB drive. The PHI involved included names, dates of birth, medical records numbers, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, security, and physical safeguards. All staff were retrained on the HIPAA Rules.
What is known
| People affected | 41,692 (as reported to HHS) |
|---|---|
| Disclosed | Jan 12, 2022 |
| Discovered | Dec 3, 2021 |
| Happened | Nov 12, 2021 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Hospital Authority of Valdosta and Lowndes County Georgiajustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Hospital Authority of Valdosta and Lowndes County Georgia (Healthcare Provider, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 12, 2022 | 41,692 |
| Oregon DOJresidents of OR | Jan 25, 2022 | 41,692 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 41692 · backfill source
- 2026-09-25 · disclosed: 2022-01-25 to 2022-01-12 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Hospital Authority of Valdosta and Lowndes County Georgia, reported that an employee impermissibly accessed and downloaded the protected health information (PHI) of 41,692 individuals to a USB drive. The PHI involve · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.
Everything about Hospital Authority of Valdosta and Lowndes County Georgia