Utah Pathology Services
Disclosed Aug 28, 20206 years ago148,594 affectedConfirmed
The covered entity (CE), Utah Pathology Services, Inc., reported that multiple employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 148,594 individuals. The ePHI involved included names, dates of birth, gender, telephone numbers, addresses, health insurance information, clinical and diagnostic information, and Social Security numbers. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring and identity restoration services. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding the Security Rule and its requirements.
What is known
| People affected | 148,594 (as reported to HHS) |
|---|---|
| Disclosed | Aug 28, 2020 |
| Discovered | Jul 30, 2020 |
| Happened | Jun 24, 2020 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2020 data breach report: Utah Pathology Servicesin.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Utah Pathology Servicesmaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Utah Pathology Services (Healthcare Provider, UT)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Maine AGresidents of ME | Aug 28, 2020 | 4 |
| HHS archivetotal | Aug 28, 2020 | 148,594 |
| Indiana AGresidents of IN | Aug 29, 2020 | 7 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn","government-id"] to ["names","ssn","government-id","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 112124 to 148594 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Utah Pathology Services, Inc., reported that multiple employees were the victims of an email phishing scheme that affected the electronic protected health information (ePHI) of 148,594 individuals. The ePHI involved · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id"] · backfill source
- 2026-09-25 · disclosed: 2020-08-29 to 2020-08-28 · backfill source
- 2026-09-25 · discovered: empty to 2020-07-30 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.