Mat‐Su Surgical Associates, APC
Disclosed May 15, 20206 years ago13,146 affectedConfirmed
The covered entity (CE), Mat-Su Surgical Associates, reported that it was the victim of a ransomware attack affecting the electronic protected health information (ePHI) of 13,146 individuals. The ePHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, medications prescribed, and claims information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE implemented additional technical safeguards. OCR provided the CE with technical assistance regarding the HIPAA Security Rule.
What is known
| People affected | 13,146 (as reported by the organization) |
|---|---|
| Disclosed | May 15, 2020 |
| Discovered | Mar 16, 2020 |
| Happened | Mar 16, 2020 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: Mat‐Su Surgical Associates, APCin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Mat-Su Surgical Associates, APCmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Mat-Su Surgical Associates, APC (Healthcare Provider, AK)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | May 15, 2020 | 3 |
| Maine AGresidents of ME | May 15, 2020 | 3 |
| HHS archivetotal | May 15, 2020 | 13,146 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn","government-id"] to ["names","ssn","government-id","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Mat-Su Surgical Associates, reported that it was the victim of a ransomware attack affecting the electronic protected health information (ePHI) of 13,146 individuals. The ePHI involved included names, addresses, dat · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id"] · backfill source
- 2026-09-25 · discovered: empty to 2020-03-16 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.