Jackson Hospital and Clinic
Disclosed Feb 27, 20267 months ago14,485 affectedConfirmed
The covered entity (CE), Jackson Hospital and Clinic reported that its business associate (BA) experienced a breach of its network that affected approximately 13,910 individuals. The protected health information involved names, addresses, dates of birth, and social security numbers. The CE notified HHS, the media, and the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 14,485 (as reported by the organization) |
|---|---|
| Disclosed | Feb 27, 2026 |
| Happened | Jul 5, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2026 data breach report: Jackson Hospital and Clinicin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Jackson Hospital and Clinic (Healthcare Provider, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 27 | 6 |
| HHS archivetotal | Feb 27 | 13,910 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Jackson Hospital and Clinic reported that its business associate (BA) experienced a breach of its network that affected approximately 13,910 individuals. The protected health information involved names, addresses, d · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.