Every public data breach

44 disclosed this week · 26,355 on record

University Gastroenterology

Disclosed Aug 16, 201615,478 affectedConfirmed

Official notice

An unauthorized person gained access to the covered entity’s (CE) electronic file storage system. The breach affected 15,478 individuals’ protected health information (PHI) and included patients’ names, addresses, dates of birth, social security numbers, and medical billing information. Following the breach, the CE completely dismantled the accessed system. OCR reviewed the CE’s policies and procedures for safeguarding PHI, which conform to the HIPAA Privacy and Security Rules. The CE provided OCR with assurances that it provided breach notification to affected individuals and the media.

What is known

People affected15,478 (as reported to HHS)
DisclosedAug 16, 2016
HappenedJan 15, 2016
AttackHacking
Data exposedNamesSocial Security numbersHealthAddresses
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to hackingby backfillSource
records_basis2026-09-25
empty to hhsby backfillSource
records2026-09-25
empty to 15478by backfillSource
summary2026-09-25
empty to An unauthorized person gained access to the covered entity’s (CE) electronic file storage system. The breach affected 15,478 individuals’ protected health information (PHI) and included patients’ names, addresses, dates of birth, social secby backfillSource
data_types2026-09-25
[] to ["names","ssn","health","addresses"]by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about University Gastroenterology