Every public data breach

47 disclosed this week · 26,367 on record

Joslin Diabetes Center

Disclosed Sep 14, 202071,160 affectedConfirmed

Official notice

The covered entity (CE), Joslin Diabetes Center, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 71,160 individuals. The ePHI involved included names, addresses, email addresses, gender, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected71,160 (as reported to HHS)
DisclosedSep 14, 2020
DiscoveredAug 20, 2020
HappenedMay 14, 2020
AttackRansomware
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
data_types2026-09-25
[] to ["names","health"]by backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 71160by backfillSource
disclosed2026-09-25
2020-09-18 to 2020-09-14by backfillSource
summary2026-09-25
empty to The covered entity (CE), Joslin Diabetes Center, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 71,160 individuals. The ePHI involved includby backfillSource
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to ransomwareby backfillSource
discovered2026-09-25
empty to 2020-08-20by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Joslin Diabetes Center