South City Hospital
Disclosed Jan 14, 20224 years ago21,601 affectedConfirmed
South City Hospital, the covered entity (CE), reported that a server containing the protected health information (PHI) of 21,601 individuals was stolen from its office. The PHI involved included names, addresses, dates of birth, Social Security numbers, and other treatment information. The CE notified HHS, affected individuals, the media, and local law enforcement. In response to the breach, the CE implemented additional physical security measures to better safeguard its equipment. OCR provided the CE with technical assistance regarding the HIPAA Security Rule.
What is known
| People affected | 21,601 (as reported by the organization) |
|---|---|
| Disclosed | Jan 14, 2022 |
| Happened | Nov 13, 2021 |
| Attack | Lost or stolen device |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: South City Hospitalin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): South City Hospital (Healthcare Provider, MO)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jan 14, 2022 | 14 |
| HHS archivetotal | Jan 14, 2022 | 21,601 |
History of this record
- 2026-09-25 · attack: unknown to lost-device · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to South City Hospital, the covered entity (CE), reported that a server containing the protected health information (PHI) of 21,601 individuals was stolen from its office. The PHI involved included names, addresses, dates of birth, Social Secu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.