Skip to content

St. Agnes Healthcare

Disclosed May 7, 20215 years ago2,821 affectedConfirmed

Official notice

The covered entity (CE), Ascension’s St. Agnes Healthcare, Inc., reported that its business associate was the victim of a cyber-attack that affected the electronic protected health information (ePHI) of 2,821 individuals. The ePHI involved included names, dates of birth, prescription information, health insurance and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

What is known

People affected2,821 (as reported to HHS)
DisclosedMay 7, 2021
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Source
HHS OCR breach report (archive, resolved): St. Agnes Healthcare (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice

Notices filed

WhereFiledPeople
HHS archivetotalMay 7, 20212,821
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.

Everything about St. Agnes Healthcare

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.