Summit Surgical

Disclosed Dec 7, 20214,910 affectedConfirmed

Summit Surgical, LLC, the covered entity (CE), reported that it was the target of a cybersecurity attack. The breach affected the protected health information (PHI) of 4,910 individuals. The breached PHI included names, addresses, dates of birth, social security numbers, claims information, and diagnoses/conditions. The CE notified HHS, affected individuals, and the media. The CE took several corrective actions in response to the breach, and OCR provided the CE with technical assistance regarding its health information privacy compliance obligations.

What is known

People affected	4,910 (as reported by the organization)
Disclosed	Dec 7, 2021
Happened	Oct 8, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2022 data breach report: Summit Surgical

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Summit Surgical (Healthcare Provider, KS)

Notices filed

TotalDec 7, 2021

HHS archive4,910 people

Residents of INMar 28, 2022

Indiana AG2 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

disclosed2026-09-25

2022-03-28 to 2021-12-07by backfillSource

summary2026-09-25

empty to Summit Surgical, LLC, the covered entity (CE), reported that it was the target of a cybersecurity attack. The breach affected the protected health information (PHI) of 4,910 individuals. The breached PHI included names, addresses, dates of by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Summit Surgical