Medical Informatics Engineering
Disclosed Jun 19, 201511 years ago3,900,000 affectedSettled
Hack of EHR vendor and NoMoreClipboard exposes data of 3.9 million
Attackers accessed servers of the Fort Wayne, Indiana EHR vendor and its NoMoreClipboard portal starting May 7, 2015 until detection about three weeks later, exposing Social Security numbers, lab results and insurance data. HHS logged 3.5 million individuals, press reported 3.9 million, and MIE paid $100,000 to HHS.
What is known
| People affected | 3,900,000 (as reported by the organization) |
|---|---|
| Disclosed | Jun 19, 2015 |
| Discovered | May 2015 |
| Happened | Jun 19, 2015 |
| Attack | Hacking |
| Data exposed | Names, Addresses, Dates of birth, Social Security numbers, Health, Insurance, Credentials and tokens, Children's data, Payment cards, Emails, Passwords |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | $100K HHS OCR HIPAA settlement (2019) (about $100K) |
Sources
| Source | |
|---|---|
| HHS Office for Civil Rights breach portal (archive): Breaches Affecting 500 or More Individualsocrportal.hhs.gov · Regulator | Regulator |
| Update: Hackers hit business associate, swipe PHI and Social Security numbersweb.archive.org · News | News |
| Indiana Medical Records Service Pays $100,000 to Settle HIPAA Breachweb.archive.org · Regulator | Regulator |
| Maine Attorney General breach notice archive: Medical Informatics Engineeringmaine.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Maine AGresidents of ME | Jun 19, 2015 | |
| Maine AGresidents of ME | Jul 15, 2015 | |
| Researchtotal | Jul 23, 2015 | 3,900,000 |
| HHS archivetotal | Jul 23, 2015 | 3,500,000 |
Other breaches at Medical Informatics Engineering
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 31, 2022Mar 31, 20224 years ago | Mar 31, 20224 years ago | Not stated | Healthcare | Confirmed | 1 |
History of this record
- 2026-09-25 · disclosed: 2015-07-15 to 2015-06-19 · backfill source
- 2026-09-25 · data_types: ["names","addresses","dob","ssn","health","insurance","credentials","children"] to ["names","addresses","dob","ssn","health","insurance","credentials","children","payment-card","emails","passwords"] · backfill source
- 2026-09-25 · disclosed: 2015-07-23 to 2015-07-15 · backfill source
- 2026-09-25 · occurred: empty to 2015-06-19 · backfill source
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.