Breachesby GlyphIndiana University Health
Disclosed Apr 17, 202321,383 affectedConfirmed
The covered entity (CE), Indiana University Health, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 4,194 individuals. The PHI involved included names and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA implemented additional technical and security safeguards to better protect PHI.
What is known
| People affected | 21,383 (as reported to HHS) |
|---|---|
| Disclosed | Apr 17, 2023 |
| Happened | Jun 20, 2023 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Indiana University Health
Breach, details not statedBreach notice filed with the Indiana AG, details not stated.8 affectedHealthcareUSMar 13Breach, details not statedBreach notice filed with the Indiana AG, details not stated.514 affectedHealthcareUSApr 19, 2024Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSFeb 10, 2022Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSApr 22, 2021Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSMar 9, 2020Breach, details not statedBreach notice filed with the Indiana AG, details not stated.10 affectedHealthcareUSDec 17, 2018Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.1,399 affectedHealthcareUSNov 3, 2017Breach, details not statedBreach notice filed with the Indiana AG, details not stated.1 affectedHealthcareUSApr 14, 2017
History of this record
4194 to 21383by backfillSource
unknown to hackingby backfillSource
[] to ["names","health"]by backfillSource
organization to hhsby backfillSource
465 to 4194by backfillSource
empty to The covered entity (CE), Indiana University Health, reported that its business associate (BA) experienced a cybersecurity incident that affected the protected health information (PHI) of 4,194 individuals. The PHI involved included names anby backfillSource
1 to 465by backfillSource
2023-07-21 to 2023-04-17by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.