Skip to content

Logan Health Medical Center

Disclosed Feb 22, 20224 years ago213,543 affectedConfirmed

Official notice

Logan Health Medical Center, the covered entity (CE), reported that it experienced a hacking attack that affected the protected health information (PHI) of 213,543 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims information, diagnoses, conditions, lab results, medications, and other treatment information. The CE notified individuals, the media, and HHS. In response to the breach the CE implemented additional administrative and technical safeguards. OCR provided technical assistance regarding the HIPAA Rules.

What is known

People affected213,543 (as reported by the organization)
DisclosedFeb 22, 2022
DiscoveredNov 22, 2021
HappenedNov 18, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
California AGresidents of CAFeb 22, 2022
Washington AGresidents of WAFeb 22, 20223,575
Oregon DOJresidents of ORFeb 22, 2022213,543
Indiana AGresidents of INFeb 22, 20228
HHS archivetotalFeb 22, 2022213,543
History of this record
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · summary: empty to Logan Health Medical Center, the covered entity (CE), reported that it experienced a hacking attack that affected the protected health information (PHI) of 213,543 individuals. The PHI involved included names, addresses, dates of birth, Soc · backfill source
  • 2026-09-25 · records_basis: empty to organization · backfill source
  • 2026-09-25 · records: empty to 213543 · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · discovered: empty to 2021-11-22 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Logan Health Medical Center

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.