University Gastroenterology
Disclosed Aug 16, 201615,478 affectedConfirmed
An unauthorized person gained access to the covered entity’s (CE) electronic file storage system. The breach affected 15,478 individuals’ protected health information (PHI) and included patients’ names, addresses, dates of birth, social security numbers, and medical billing information. Following the breach, the CE completely dismantled the accessed system. OCR reviewed the CE’s policies and procedures for safeguarding PHI, which conform to the HIPAA Privacy and Security Rules. The CE provided OCR with assurances that it provided breach notification to affected individuals and the media.
What is known
| People affected | 15,478 (as reported to HHS) |
|---|---|
| Disclosed | Aug 16, 2016 |
| Happened | Jan 15, 2016 |
| Attack | Hacking |
| Data exposed | NamesSocial Security numbersHealthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.