Data Breaches

Breach Subtotal

Breach Type: all
Organization Type: all
Year(s) of Breach: all
Company or Organization: all
Date Made Public:
March 4, 2019
Company: St. Francis Physician Services
Location: , South Carolina
Type of breach:
HACK
Type of organization:
MED
Records Breached:
32,178

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
March 1, 2019
Company: RSC Insurance Brokerage, Inc.
Location: , Massachusetts
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
2,088

Location of breached information: Laptop

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
March 1, 2019
Company: Arthritis & Rheumatism Associates, P.C.
Location: , Maryland
Type of breach:
HACK
Type of organization:
MED
Records Breached:
500

Location of breached information: Electronic Medical Record

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 28, 2019
Company: Pasquotank-Camden Emergency Medical Service
Location: , North Carolina
Type of breach:
HACK
Type of organization:
MED
Records Breached:
20,420

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 28, 2019
Company: Rush University Medical Center
Location: , Illinois
Type of breach:
DISC
Type of organization:
MED
Records Breached:
44,924

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 27, 2019
Company: Humana Inc
Location: , Kentucky
Type of breach:
HACK
Type of organization:
MED
Records Breached:
1,447

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 27, 2019
Company: West Virginia Public Employees Insurance Agency
Location: , West Virginia
Type of breach:
HACK
Type of organization:
MED
Records Breached:
1,400

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 22, 2019
Company: Molina Healthcare
Location: , California
Type of breach:
HACK
Type of organization:
MED
Records Breached:
895

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 22, 2019
Company: Delaware Guidance Services for Children and Youth, Inc.
Location: , Delaware
Type of breach:
HACK
Type of organization:
MED
Records Breached:
50,000

Location of breached information: Desktop Computer, Electronic Medical Record, Email, Laptop

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 21, 2019
Company: UConn Health
Location: , Connecticut
Type of breach:
HACK
Type of organization:
MED
Records Breached:
326,629

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 21, 2019
Company: Rocky Boy Health Center
Location: , Montana
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
6,000

Location of breached information: Other

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 20, 2019
Company: Rutland Hospital, Inc. d/b/a/ Rutland Regional Medical Center
Location: , Vermont
Type of breach:
HACK
Type of organization:
MED
Records Breached:
72,224

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 20, 2019
Company: UW Medicine
Location: , Washington
Type of breach:
HACK
Type of organization:
MED
Records Breached:
973,024

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 18, 2019
Company: Columbia Surgical Specialist of Spokane
Location: , Washington
Type of breach:
HACK
Type of organization:
MED
Records Breached:
400,000

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: Memorial Hospital at Gulfport
Location: , Mississippi
Type of breach:
HACK
Type of organization:
MED
Records Breached:
30,642

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: OneDigital/Digital Insurance, LLC
Location: , Georgia
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
2,763

Location of breached information: Laptop

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: California Physicians' Service d/b/a Blue Shield of California
Location: , California
Type of breach:
HACK
Type of organization:
MED
Records Breached:
18,416

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: Kids Central Inc.
Location: , Florida
Type of breach:
DISC
Type of organization:
MED
Records Breached:
3,250

Location of breached information: Email

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: Blue Cross Blue Shield of Massachusetts
Location: , Massachusetts
Type of breach:
HACK
Type of organization:
MED
Records Breached:
1,262

Location of breached information: Email

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 15, 2019
Company: AltaMed Health Services Corporation
Location: , California
Type of breach:
HACK
Type of organization:
MED
Records Breached:
6,000

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 14, 2019
Company: Portsmouth Community Health Center
Location: , Virginia
Type of breach:
HACK
Type of organization:
MED
Records Breached:
12,000

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Rocky Mountain Health Care Services
Location: , Colorado
Type of breach:
HACK
Type of organization:
MED
Records Breached:
971

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Crawford Wellness Center, Inc
Location: , Texas
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
1,500

Location of breached information: Paper/Films

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Green Ridge Behavioral Health, LLC
Location: , Maryland
Type of breach:
HACK
Type of organization:
MED
Records Breached:
14,000

Location of breached information: Electronic Medical Record, Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Kentucky Counseling Center, LLC
Location: , Kentucky
Type of breach:
DISC
Type of organization:
MED
Records Breached:
16,440

Location of breached information: Electronic Medical Record

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Rush University Medical Center
Location: , Illinois
Type of breach:
DISC
Type of organization:
MED
Records Breached:
908

Location of breached information: Paper/Films

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 11, 2019
Company: Sharecare Health Data Services, LLC
Location: , California
Type of breach:
HACK
Type of organization:
MED
Records Breached:
7,300

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 8, 2019
Company: USR Holdings, LLC
Location: , Florida
Type of breach:
HACK
Type of organization:
MED
Records Breached:
2,903

Location of breached information: Network Server

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
February 8, 2019
Company: AZ Plastic Surgery Center
Location: , Arizona
Type of breach:
HACK
Type of organization:
MED
Records Breached:
5,524

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 5, 2019
Company: AdventHealth Medical Group
Location: , Florida
Type of breach:
HACK
Type of organization:
MED
Records Breached:
42,161

Location of breached information: Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 4, 2019
Company: United Hospital District, Inc.
Location: , Minnesota
Type of breach:
HACK
Type of organization:
MED
Records Breached:
2,143

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 4, 2019
Company: Lakeland Care, Inc.
Location: , Wisconsin
Type of breach:
HACK
Type of organization:
MED
Records Breached:
1,300

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 4, 2019
Company: Rainbow Dental Care PLLC
Location: , Texas
Type of breach:
HACK
Type of organization:
MED
Records Breached:
10,000

Location of breached information: Desktop Computer

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 1, 2019
Company: Anesthesia Associates of Kansas City
Location: , Kansas
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
3,472

Location of breached information: Paper/Films

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
February 1, 2019
Company: Reproductive Medicine and Infertility Associates, P.A.
Location: , Minnesota
Type of breach:
HACK
Type of organization:
MED
Records Breached:
40,000

Location of breached information: Desktop Computer, Network Server

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
January 31, 2019
Company: CHI - Lakewood Health
Location: , Minnesota
Type of breach:
DISC
Type of organization:
MED
Records Breached:
885

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
Date Made Public:
January 30, 2019
Company: CVS Pharmacy
Location: , Rhode Island
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
5,645

Location of breached information: Paper/Films

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
January 30, 2019
Company: Aetna
Location: , Connecticut
Type of breach:
HACK
Type of organization:
MED
Records Breached:
2,030

Location of breached information: Email

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
January 29, 2019
Company: Cambridge Healthcare Services, LLC
Location: , California
Type of breach:
PHYS
Type of organization:
MED
Records Breached:
10,866

Location of breached information: Laptop

Business associate present: Yes

Information Source:
US Department of Health and Human Services
Date Made Public:
January 29, 2019
Company: Roper St. Francis Healthcare
Location: , South Carolina
Type of breach:
HACK
Type of organization:
MED
Records Breached:
35,253

Location of breached information: Email

Business associate present: No

Information Source:
US Department of Health and Human Services
CSV