South Western Communications
Disclosed Jul 26, 20242 years ago4,386 affectedConfirmed
The covered entity (CE), South West Communications, Inc., reported that it experienced a cyberattack that affected the protected health information (PHI) of 1,115 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses/ conditions, lab results, and medications. The CE notified HHS and the affected individuals and provided substitute notice. In response to the breach, the CE provided complimentary identity protection services and implemented additional administrative and technical safeguards to better protect its PHI. The CE received technical assistance from OCR regarding its health information privacy compliance obligations.
What is known
| People affected | 4,386 (as reported by the organization) |
|---|---|
| Disclosed | Jul 26, 2024 |
| Happened | Dec 21, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Telecom · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2024 data breach report: South Western Communicationsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): South Western Communications (Health Plan, IN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jul 26, 2024 | 1,188 |
| HHS archivetotal | Jul 26, 2024 | 1,115 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), South West Communications, Inc., reported that it experienced a cyberattack that affected the protected health information (PHI) of 1,115 individuals. The PHI involved included names, addresses, dates of birth, driv · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.