Skip to content

Norwood Clinic

Disclosed Feb 25, 20224 years ago228,103 affectedConfirmed

Official notice

On October 22, 2021, Norwood discovered that it was the victim of a cyber attack that resulted in the unauthorized access of data stored on its network. Immediately after discovering the incident, Norwood took steps to secure and safely restore its systems and operations. In addition, Norwood engaged cybersecurity experts to conduct a thorough forensics investigation to determine the nature and scope of the incident and to assist in the remediation efforts. The investigation revealed that an unauthorized party gained access to Norwood's servers that stored patient information. However, the investigation was unable to confirm the specific information that may have been accessed. Therefore, out of an abundance of caution, Norwood is providing notice to all of its patients, regardless of whether their information was in fact subject to unauthorized access or acquisition. Norwood has no reason to believe that any individual's information has been misused as a result of this event.

What is known

People affected228,103 (as reported by the organization)
DisclosedFeb 25, 2022
HappenedSep 20, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
Indiana Attorney General 2022 data breach report: Norwood Clinicin.gov · Official notice
HHS OCR breach report (archive, resolved): Norwood Clinic (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalFeb 25, 2022228,000
Indiana AGresidents of INMar 8, 202273
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · disclosed: 2022-03-08 to 2022-02-25 · backfill source
  • 2026-09-25 · summary: empty to On October 22, 2021, Norwood discovered that it was the victim of a cyber attack that resulted in the unauthorized access of data stored on its network. Immediately after discovering the incident, Norwood took steps to secure and safely res · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Norwood Clinic

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.