Advocate Health Care Network

Advocate Health and Hospitals Corporation d/b/a Advocate Medical Group reported to HHS on 2013-09-13 a Hacking/IT Incident affecting 2029 individuals. Breached information located on Network Server. The entity is a Business Associate. The breach involved ePHI including demographic, clinical, insurance, and financial data. A $5.55 million settlement was reached with OCR.

Advocate Medical Group reported a data breach to the California Attorney General. The incident occurred on July 15, 2013. The notification was filed on August 23, 2013. The breach involved protected health information (PHI) and personally identifiable information (PII), including names, addresses, and potentially Social Security numbers. The specific attack vector and number of affected individuals are not detailed in the provided summary fields.

Advocate Health and Hospitals Corporation, d/b/a Advocate Medical Group reported to HHS on 2013-08-23 a theft affecting 4,029,530 individuals. The investigation revealed multiple security failures, including the theft of an unencrypted laptop from a vehicle. Breached data included patient names, addresses, dates of birth, credit card numbers, and clinical and health insurance information. The breached information was located on a desktop computer.

Advocate Health Care (IL) reported to HHS OCR on 2010-01-22 a Theft affecting 812 individuals. On November 24, 2009, an Advocate nurse's laptop was stolen, containing PHI including names, addresses, dates of birth, Social Security numbers, insurance information, medications, and diagnoses. Breached information was located on a Laptop. No business associate was involved. Following the breach, Advocate revised mobile device security policies and OCR required workforce mobile-device users to submit acknowledgment forms.