Midwest Geriatric Management
Disclosed Dec 14, 20205 years ago4,814 affectedConfirmed
The covered entity (CE), Midwest Geriatric Management, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 4,814 individuals. The PHI involved included names, Social Security numbers, and financial and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained on email security.
What is known
| People affected | 4,814 (as reported by the organization) |
|---|---|
| Disclosed | Dec 14, 2020 |
| Happened | Oct 13, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Midwest Geriatric Managementin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Midwest Geriatric Management (Healthcare Provider, MO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Dec 14, 2020 | 5 |
| HHS archivetotal | Dec 14, 2020 | 4,814 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Midwest Geriatric Management, reported that an employee was the subject of an email phishing scheme that affected the protected health information (PHI) of 4,814 individuals. The PHI involved included names, Social · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.