One Brooklyn Health System
Disclosed Jan 18, 20233 years ago235,251 affectedConfirmed
One Brooklyn Health (the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 211,347 individuals. The PHI involved included names, dates of birth, addresses, diagnoses, medical records numbers, medications, and health insurance information. The CE notified HHS, impacted individuals, and the media. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 235,251 (as reported by the organization) |
|---|---|
| Disclosed | Jan 18, 2023 |
| Happened | Jul 9, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: One Brooklyn Health Systemin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): One Brooklyn Health System (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 18, 2023 | 211,347 |
| Indiana AGresidents of IN | Apr 20, 2023 | 53 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2023-04-20 to 2023-01-18 · backfill source
- 2026-09-25 · summary: empty to One Brooklyn Health (the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 211,347 individuals. The PHI involved included names, dates of birth, addresses, diagnose · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.