Skip to content

Johns Hopkins Medicine

Disclosed Jul 25, 20233 years ago310,405 affectedConfirmed

Official notice

John Hopkins Medicine, the covered entity (CE), reported that it experienced a malware attack that compromised the protected health information (PHI) of 310,405 individuals. The PHI involved included names, addresses, birthdates, diagnoses, Social Security numbers, and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative and technical safeguards.

What is known

People affected310,405 (as reported to HHS)
DisclosedJul 25, 2023
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): Johns Hopkins Medicine (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalJul 25, 2023310,405
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about Johns Hopkins Medicine

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.