Mitcon
Disclosed Dec 19, 20223 years ago4,002 affectedConfirmed
The business associate (BA), MITCON, reported that it was the victim of a hacking attack affecting the protected health information (PHI) of 1,131 individuals. The PHI involved included names, addresses, Social Security and drivers’ license numbers, dates of birth, financial information, medications, and other treatment information. The BA notified HHS, affected individuals, and the media. In response to the breach, the BA implemented additional technical safeguards and provided complimentary credit monitoring services to affected individuals. OCR provided technical assistance regarding the HIPAA Security Rule.
What is known
| People affected | 4,002 (as reported by the organization) |
|---|---|
| Disclosed | Dec 19, 2022 |
| Happened | Oct 18, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Mitconin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): MITCON (Business Associate, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 19, 2022 | 1,131 |
| Indiana AGresidents of IN | Feb 16, 2023 | 13 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2023-02-16 to 2022-12-19 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), MITCON, reported that it was the victim of a hacking attack affecting the protected health information (PHI) of 1,131 individuals. The PHI involved included names, addresses, Social Security and drivers’ license · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.