University of Minnesota Physicians
Disclosed Mar 30, 20206 years ago310,666 affectedConfirmed
University of Minnesota Physicians, the covered entity (CE), reported that several employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 310,666 individuals. The PHI involved included names, addresses, telephone numbers, dates of birth, Social Security numbers, health insurance information, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In an effort to prevent a recurrence, the CE implemented additional administrative, technical, and security safeguards to better protect PHI. Staff were retrained on email security precautions.
What is known
| People affected | 310,666 (as reported to HHS) |
|---|---|
| Disclosed | Mar 30, 2020 |
| Happened | Jan 30, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: University of Minnesota Physiciansoag.ca.gov · Official notice | Official notice |
| Indiana Attorney General 2020 data breach report: University of Minnesota Physiciansin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): University of Minnesota Physicians (Healthcare Provider, MN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 30, 2020 | 3 |
| HHS archivetotal | Mar 30, 2020 | 310,666 |
| California AGresidents of CA | Nov 25, 2020 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 683 to 310666 · backfill source
- 2026-09-25 · summary: empty to University of Minnesota Physicians, the covered entity (CE), reported that several employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 310,666 individuals. The PHI involved include · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 683 · backfill source
- 2026-09-25 · disclosed: 2020-11-25 to 2020-03-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.