IMA Financial Group

Disclosed Apr 19, 20239,428 affectedConfirmed

The business associate (BA), IMA Financial Group, Inc., reported that it experienced a cyber-attack that affected the protected health information (PHI) of 5,242 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, lab results, medications, and other treatment information. The BA notified covered entities and HHS, and provided substitute notice of the breach. In response to the breach the BA implemented additional administrative and technical safeguards to improve its security posture. OCR provided technical assistance regarding the HIPAA Rules.

What is known

People affected	9,428 (as reported by the organization)
Disclosed	Apr 19, 2023
Discovered	Mar 10, 2023
Happened	Oct 18, 2022
Attack	Hacking
Data exposed	NamesHealth
Sector	Finance · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: IMA Financial Group

Official noticejustice.oregon.gov

Oregon DOJ breach notice: IMA Financial Group

Official noticeago.vermont.gov

Vermont Attorney General: 2023-05-10 IMA Financial Group Data Breach Notice to Consumers

Official noticein.gov

Indiana Attorney General 2023 data breach report: IMA Financial Group

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): IMA Financial Group (Business Associate, KS)

Notices filed

Residents of INApr 19, 2023

Indiana AG450 people

Residents of VTMay 10, 2023

Vermont AGCount not stated

TotalMay 10, 2023

HHS archive5,242 people

Residents of CAJun 28, 2023

California AGCount not stated

Residents of ORJun 28, 2023

Oregon DOJ48,358 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

summary2026-09-25

empty to The business associate (BA), IMA Financial Group, Inc., reported that it experienced a cyber-attack that affected the protected health information (PHI) of 5,242 individuals. The PHI involved included names, addresses, dates of birth, driveby backfillSource

records_basis2026-09-25

empty to organizationby backfillSource

records2026-09-25

empty to 9428by backfillSource

disclosed2026-09-25

2023-05-10 to 2023-04-19by backfillSource

disclosed2026-09-25

2023-06-28 to 2023-05-10by backfillSource

discovered2026-09-25

empty to 2023-03-10by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about IMA Financial Group