University of Iowa Health Care
Disclosed Aug 29, 20251 year ago101,875 affectedConfirmed
University of Iowa Health Care, the covered entity (CE) reported that its business associate (BA) experienced a ransomware incident that affected the protected health information (PHI) of 101,875 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, and the media. In response to the breach and OCR’s investigation, the CE retrained its workforce members and those of its BA.
What is known
| People affected | 101,875 (as reported to HHS) |
|---|---|
| Disclosed | Aug 29, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): University of Iowa Health Care (Healthcare Provider, IA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Aug 29, 2025 | 101,875 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.