The covered entity (CE), St. Charles Health System, reported that its business associate experienced a ransomware attack that affected the electronic protected health information (ePHI) of 4,687 individuals. The ePHI involved included names, Social Security numbers, addresses, dates of birth, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. Following the breach, the BA provided complimentary identity and credit monitoring services.
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · data_types: [] to ["names","health"] · backfill source
2026-09-25 · summary: empty to The covered entity (CE), St. Charles Health System, reported that its business associate experienced a ransomware attack that affected the electronic protected health information (ePHI) of 4,687 individuals. The ePHI involved included names · backfill source
