Lakeshore Bone and Joint Institute
Disclosed Nov 15, 20214 years ago23,627 affectedConfirmed
The covered entity (CE), Lakeshore Bone & Joint Institute, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) for 23,627 individuals. The impacted PHI included names, dates of birth, drivers’ license details, and diagnoses. The CE notified HHS and the affected individuals, and published media notice. In response to the breach, the CE implemented additional administrative and technical safeguards. OCR provided technical assistance.
What is known
| People affected | 23,627 (as reported by the organization) |
|---|---|
| Disclosed | Nov 15, 2021 |
| Happened | Jun 14, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Lakeshore Bone and Joint Institutein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Lakeshore Bone & Joint Institute (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Nov 15, 2021 | 21,926 |
| HHS archivetotal | Jan 10, 2022 | 23,627 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Lakeshore Bone & Joint Institute, reported that an employee was the subject of an email phishing scheme that compromised the protected health information (PHI) for 23,627 individuals. The impacted PHI included names · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.