University Medical Center of Southern Nevada
Disclosed Mar 31, 20215 years ago1,300,000 affectedConfirmed
The covered entity (CE), University Medical Center of Southern Nevada, reported that its business associate (BA) was the victim of a cyber-attack affecting the protected health information (PHI) of 12,230 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach the CE implemented additional administrative and technical safeguards and provided complimentary credit monitoring services to affected individuals.
What is known
| People affected | 1,300,000 (as reported by the organization) |
|---|---|
| Disclosed | Mar 31, 2021 |
| Discovered | Jun 14, 2021 |
| Happened | Jun 14, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: University Medical Center of Southern Nevadaoag.ca.gov · Official notice | Official notice |
| Washington Attorney General breach notice: University Medical Center of Southern Nevadaatg.wa.gov · Official notice | Official notice |
| Oregon DOJ breach notice: University Medical Center of Southern Nevadajustice.oregon.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: University Medical Center of Southern Nevadain.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): University Medical Center of Southern Nevada (Healthcare Provider, NV)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 31, 2021 | 1,833 |
| Indiana AGresidents of IN | Aug 2, 2021 | 1,013 |
| HHS archivetotal | Aug 13, 2021 | 1,300,000 |
| Washington AGresidents of WA | Oct 11, 2021 | 3,572 |
| California AGresidents of CA | Oct 15, 2021 | |
| Oregon DOJresidents of OR | Oct 20, 2021 | |
| HHS archivetotal | Feb 24, 2022 | 12,230 |
Other breaches at University Medical Center of Southern Nevada
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed Mar 28, 2026Mar 286 months agoInsider | Mar 286 months ago | Insider | Healthcare | Confirmed | 1,221 |
| Disclosed Nov 17, 2022Nov 17, 20223 years agoInsider | Nov 17, 20223 years ago | Insider | Healthcare | Confirmed | 1,861 |
History of this record
- 2026-09-25 · disclosed: 2021-08-02 to 2021-03-31 · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), University Medical Center of Southern Nevada, reported that its business associate (BA) was the victim of a cyber-attack affecting the protected health information (PHI) of 12,230 individuals. The PHI involved inclu · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 1300000 · backfill source
- 2026-09-25 · disclosed: 2021-10-11 to 2021-08-02 · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · disclosed: 2021-10-15 to 2021-10-11 · backfill source
- 2026-09-25 · discovered: empty to 2021-06-14 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.
Everything about University Medical Center of Southern Nevada