Breachesby GlyphMayo Clinic
Disclosed Mar 28, 20251,869 affectedConfirmed
The covered entity (CE), Mayo Clinic, reported that a workforce member emailed the protected health information (PHI) of 1,869 individuals to a personal email address and then further disclosed the PHI to unauthorized individuals. The PHI involved included clinical and demographic information. The CE notified HHS and the affected individuals. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 1,869 (as reported to HHS) |
|---|---|
| Disclosed | Mar 28, 2025 |
| Attack | Insider |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Mayo Clinic
Insider breachInsider exposed names and health records. Reported to the HHS archive.1,152 affectedHealthcareUSNov 3, 2023Insider breachInsider exposed names and health records. Reported to the HHS archive.1,614 affectedHealthcareUSOct 5, 2020Insider breachInsider exposed names and health records. Reported to the HHS archive.1,902 affectedHealthcareUSMar 22, 2019Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.1,740 affectedHealthcareUSSep 8, 2010
History of this record
First recordedby backfillSource
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.