Uponor North America
Disclosed Apr 12, 20233 years ago7,275 affectedConfirmed
Uponor North America, the covered entity (CE), reported that it experienced a ransomware attack that affected the protected health information (PHI) of 1,048 individuals. The PHI involved included names and claims information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach the CE implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Rules.
What is known
| People affected | 7,275 (as reported by the organization) |
|---|---|
| Disclosed | Apr 12, 2023 |
| Happened | Nov 4, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Uponor North Americain.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Uponor North America (Health Plan, MN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Apr 12, 2023 | 17 |
| HHS archivetotal | Jun 8, 2023 | 1,048 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Uponor North America, the covered entity (CE), reported that it experienced a ransomware attack that affected the protected health information (PHI) of 1,048 individuals. The PHI involved included names and claims information. The CE notifi · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.