Breachesby GlyphSummit Medical Group
Disclosed Jan 12, 2024464,159 affectedConfirmed
The covered entity (CE), Summit Medical Group, reported that multiple employees were the targets of an email phishing scheme that compromised the protected health information (PHI) of 464,159 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect PHI.
What is known
| People affected | 464,159 (as reported to HHS) |
|---|---|
| Disclosed | Jan 12, 2024 |
| Attack | Hacking |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
Other breaches at Summit Medical Group
Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.525 affectedHealthcareUSNov 2, 2018Insider breachInsider exposed names and health records. Reported to the HHS archive.674 affectedHealthcareUSAug 23, 2016Lost or stolen device breachLost or stolen device exposed names and health records. Reported to the HHS archive.731 affectedHealthcareUSSep 28, 2011
History of this record
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.