Saint Francis Ministries

Disclosed Apr 10, 20203,680 affectedConfirmed

The covered entity (CE), Saint Francis Ministries, reported that an employee was the victim of an email phishing attack affecting the protected health information (PH) of 3,680 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, financial information, diagnoses, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards and provided cybersecurity training to its workforce.

What is known

People affected	3,680 (as reported to HHS)
Disclosed	Apr 10, 2020
Happened	May 1, 2020
Attack	Hacking
Data exposed	NamesHealth
Sector	Nonprofit · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2021 data breach report: Saint Francis Ministries

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Saint Francis Ministries (Healthcare Provider, KS)

Notices filed

TotalApr 10, 2020

HHS archive3,680 people

Residents of INDec 15, 2020

Indiana AG3 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

999 to 3680by backfillSource

disclosed2026-09-25

2020-12-15 to 2020-04-10by backfillSource

summary2026-09-25

empty to The covered entity (CE), Saint Francis Ministries, reported that an employee was the victim of an email phishing attack affecting the protected health information (PH) of 3,680 individuals. The PHI involved included names, addresses, dates by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Saint Francis Ministries