Skip to content

Nova Biomedical

Disclosed Dec 7, 20205 years ago3,774 affectedConfirmed

Official notice

The covered entity (CE), Nova Biomedical Corporation, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 3,774 individuals. The PHI involved included names, dates of birth, health insurance information, and Social Security numbers. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to affected individuals.

What is known

People affected3,774 (as reported to HHS)
DisclosedDec 7, 2020
HappenedOct 31, 2020
AttackHacking
Data exposedNames, Health
SectorInsurance · US
StatusConfirmed

Sources

Source
Indiana Attorney General 2020 data breach report: Nova Biomedicalin.gov · Official notice
HHS OCR breach report (archive, resolved): Nova Biomedical (Health Plan, MA)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INDec 7, 20204
HHS archivetotalAug 17, 20213,774

Other breaches at Nova Biomedical

BreachAffected
Disclosed Jan 27, 2026Jan 278 months ago11K
History of this record
  • 2026-09-25 · sector: other to insurance · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: organization to hhs · backfill source
  • 2026-09-25 · records: 2000 to 3774 · backfill source
  • 2026-09-25 · summary: empty to The covered entity (CE), Nova Biomedical Corporation, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 3,774 individuals. The PHI involved included names, dates of birth, health insu · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Nova Biomedical

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.