McAllen Surgical Specialty Center
Disclosed Sep 20, 20215 years ago29,227 affectedConfirmed
McAllen Surgical Specialty Center, the covered entity (CE), reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 29,227 individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect sensitive data.
What is known
| People affected | 29,227 (as reported by the organization) |
|---|---|
| Disclosed | Sep 20, 2021 |
| Happened | May 12, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: McAllen Surgical Specialty Centerin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): McAllen Surgical Specialty Center (Healthcare Provider, TX)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Sep 20, 2021 | 29,227 |
| Indiana AGresidents of IN | Oct 22, 2021 | 10 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2021-10-22 to 2021-09-20 · backfill source
- 2026-09-25 · summary: empty to McAllen Surgical Specialty Center, the covered entity (CE), reported that it experienced a cybersecurity incident that compromised the protected health information (PHI) of 29,227 individuals. The PHI involved included names, dates of birth · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.