Integrated Services of Kalamazoo
Disclosed Nov 10, 20214 years ago3,754 affectedConfirmed
The covered entity (CE), Integrated Services of Kalamazoo, reported that multiple employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 3,754 individuals. The PHI involved included names, addresses, Social Security numbers, claims and financial information, dates of birth, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE strengthened its administrative and technical safeguards and retrained its staff on email security.
What is known
| People affected | 3,754 (as reported to HHS) |
|---|---|
| Disclosed | Nov 10, 2021 |
| Happened | Mar 29, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Oregon DOJ breach notice: Integrated Services of Kalamazoojustice.oregon.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Integrated Services of Kalamazoo (Healthcare Provider, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 10, 2021 | 3,754 |
| Oregon DOJresidents of OR | Dec 17, 2021 | 3,396 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 3754 · backfill source
- 2026-09-25 · disclosed: 2021-12-17 to 2021-11-10 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Integrated Services of Kalamazoo, reported that multiple employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 3,754 individuals. The PHI involved included n · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Oregon DOJ), confirmed by Oregon DOJ. Record counts are as reported. Not legal advice.