University of Maryland, Baltimore
Disclosed Jul 2, 20215 years ago37,263 affectedConfirmed
The business associate (BA), University of Maryland, Baltimore, reported that its vendor experienced a cyber-attack that affected the protected health information (PHI) of approximately 37,263 individuals. The PHI involved included names, dates of birth, addresses, claims information, diagnoses and conditions, lab results, medications prescribed, and other treatment information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the BA strengthened its technical safeguards to better protect PHI.
What is known
| People affected | 37,263 (as reported to HHS) |
|---|---|
| Disclosed | Jul 2, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report (archive, resolved): University of Maryland, Baltimore (Business Associate, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jul 2, 2021 | 37,263 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS archive), confirmed by HHS OCR. Record counts are as reported. Not legal advice.