Skip to content
Breaches.

Iron Mountain

Disclosed Aug 15, 201412 years ago49,714 affectedConfirmed

Official notice

\N

What is known

People affected49,714 (as reported to HHS)
DisclosedAug 15, 2014
AttackLost or stolen device
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): Iron Mountain (Business Associate, CA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalAug 15, 201449,714
HHS archivetotalAug 15, 201410,000
HHS archivetotalNov 14, 20142,691

Other breaches at Iron Mountain

BreachAffected
Iron Mountain says Everest breach limited to one folder of marketing filesFeb 37 months agoExtortionUnverifiedUnknown
History of this record
  • 2026-09-25 · records: 2691 to 49714 · backfill source
  • 2026-09-25 · disclosed: 2014-11-14 to 2014-08-15 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Iron Mountain

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.