Sidney Health Center
Disclosed Jan 3, 20251 year ago1,370 affectedConfirmed
The covered entity (CE), Sidney Health Center, reported that an employee impermissibly saved the protected health information (PHI) of 1,370 individuals to his personal Google account. The PHI involved included names, birthdates, addresses, medications, and other treatment information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and implemented additional technical safeguards.
What is known
| People affected | 1,370 (as reported to HHS) |
|---|---|
| Disclosed | Jan 3, 2025 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): Sidney Health Center (Healthcare Provider, MT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 3, 2025 | 1,370 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.