Skip to content

Riverview Health

Disclosed Apr 3, 20242 years ago1,937 affectedConfirmed

Official notice

Riverview Health, the covered entity (CE), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 1,562 individuals. The PHI involved included names, addresses, dates of birth, diagnoses, conditions, and medications. The CE notified HHS, affected individuals, and the media. The CE implemented additional technical safeguards to better protect sensitive data.

What is known

People affected1,937 (as reported by the organization)
DisclosedApr 3, 2024
HappenedFeb 24, 2024
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
Indiana Attorney General 2024 data breach report: Riverview Healthin.gov · Official notice
HHS OCR breach report (archive, resolved): Riverview Health (Healthcare Provider, IN)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
Indiana AGresidents of INApr 3, 20241
Indiana AGresidents of INOct 4, 20241
Indiana AGresidents of INOct 18, 20241,930
HHS archivetotalOct 25, 20241,562

Other breaches at Riverview Health

BreachAffected
Disclosed Jun 1, 2023Jun 1, 20233 years ago1
Disclosed Feb 28, 2020Feb 28, 20206 years agoInsider2,610
Disclosed Jan 12, 2016Jan 12, 201610 years agoUnknown
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · summary: empty to Riverview Health, the covered entity (CE), reported that it experienced a cyberattack that compromised the protected health information (PHI) of 1,562 individuals. The PHI involved included names, addresses, dates of birth, diagnoses, condi · backfill source
  • 2026-09-25 · records: 1 to 1937 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Riverview Health

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.