MedStar Health

Disclosed Sep 25, 2020668 affectedConfirmed

The covered entity (CE), MedStar Health, reported that its business associate experienced a ransomware attack affecting the electronic protected health information (ePHI) of 668 individuals. The ePHI involved included names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected	668 (as reported to HHS)
Disclosed	Sep 25, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): MedStar Health (Healthcare Provider, MD)

Notices filed

TotalSep 25, 2020

HHS archive668 people

Other breaches at MedStar Health

Hacking breachHacking exposed names and health records. Reported to the HHS OCR.64K affectedHealthcareUSDec 3, 2025 Hacking breachHacking exposed names and health records. Reported to the HHS archive.183K affectedHealthcareUSMay 3, 2024

History of this record

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about MedStar Health