Medical Center Barbour
Disclosed Dec 27, 20232 years ago61,014 affectedConfirmed
The covered entity (CE), Medical Center Barbour, detected ransomware in its network environment that compromised the affected the protected health information (PHI) of 61,014 individuals. The PHI involved includes names, addresses, dates of birth, drivers’ license and Social Security numbers, diagnoses and conditions, lab results, financial information, and medications. The CE provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its website. In response to the breach, the CE reset all passwords and implemented a series of improved technical safeguards.
What is known
| People affected | 61,014 (as reported by the organization) |
|---|---|
| Disclosed | Dec 27, 2023 |
| Happened | Oct 24, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2024-10-01 Medical Center Barbour Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2024 data breach report: Medical Center Barbourin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Medical Center Barbour (Healthcare Provider, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 27, 2023 | 61,014 |
| Indiana AGresidents of IN | Aug 22, 2024 | 53 |
| Vermont AGresidents of VT | Oct 1, 2024 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2024-08-22 to 2023-12-27 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Medical Center Barbour, detected ransomware in its network environment that compromised the affected the protected health information (PHI) of 61,014 individuals. The PHI involved includes names, addresses, dates of · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 61014 · backfill source
- 2026-09-25 · disclosed: 2024-10-01 to 2024-08-22 · backfill source
- 2026-09-25 · occurred: empty to 2023-10-24 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.