Breachesby GlyphMayo Clinic
Disclosed Mar 22, 20191,902 affectedConfirmed
The Mayo Clinic, the covered entity (CE), reported that an update to its mobile application software enabled users to access the electronic protected health information (ePHI) of 1,902 individuals. The ePHI involved included names, addresses, dates of birth, diagnoses, lab results, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. To fix this error, the CE revised its mobile application software.
What is known
| People affected | 1,902 (as reported to HHS) |
|---|---|
| Disclosed | Mar 22, 2019 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Mayo Clinic
Insider breachInsider exposed names and health records. Reported to the HHS archive.1,869 affectedHealthcareUSMar 28, 2025Insider breachInsider exposed names and health records. Reported to the HHS archive.1,152 affectedHealthcareUSNov 3, 2023Insider breachInsider exposed names and health records. Reported to the HHS archive.1,614 affectedHealthcareUSOct 5, 2020Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.1,740 affectedHealthcareUSSep 8, 2010
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.