INDIANA UNIVERSITY HEALTH, INC.
ent_019e0b40bbbb5a4ab14248c1b2684b9c
Disclosures
25+
State AG · HHS OCR · 2 jurisdictions
Multi-filing incidents
5
incidents joining 2+ filings here
Max affected reported
21,383
nationwide · HHS OCR IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- INDIANA UNIVERSITY HEALTH, INC.
- Normalized
- indiana university health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 5493005H76YOO81B8D75
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (newest 25)newest first
- Indiana State AGas victim2026-04-10
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-12 and was reported on 2026-04-10. 1 Indiana residents were affected.
- Indiana State AGas victim2026-04-10
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-12 and was reported on 2026-04-10. 1 Indiana residents were affected.
- Indiana State AGas victim2026-04-10
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-17 and was reported on 2026-04-10. 1 Indiana residents were affected.
- Indiana State AGas victim2026-03-13
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-08 and was reported on 2026-03-13. 3 Indiana residents were affected.
- Indiana State AGas victim2025-06-23
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-01 and was reported on 2025-06-23. 1 Indiana residents were affected.
- Indiana State AGas victim2025-03-14
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-04 and was reported on 2025-03-14. 481 Indiana residents were affected. 514 individuals affected in total.
- Indiana State AGas victim2025-01-27
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-28 and was reported on 2025-01-27. 1 Indiana residents were affected.
- Indiana State AGas victim2025-01-17
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-27 and was reported on 2025-01-17. 1 Indiana residents were affected.
- INDIANAHHS OCRas victim2025-01-07
Indiana University Health, Affiliated Covered Entity reported to HHS on 2025-01-07 a Hacking/IT Incident affecting 1446 individuals. Breached information located on Email. An employee was phished, compromising PHI including names, DOBs, SSNs, and health data.
- Indiana State AGas victim2025-01-02
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-27 and was reported on 2025-01-02. 209 Indiana residents were affected. 214 individuals affected in total.
- INDIANAHHS OCRas victim2024-12-17
Indiana University Health, Affiliated Covered Entity (IN) reported to HHS on 2024-12-17 a Hacking/IT Incident (email phishing) affecting 19,827 individuals. An employee was targeted by a phishing scheme that compromised PHI including names, dates of birth, addresses, Social Security and driver's license numbers, diagnoses/conditions, and other treatment information. Breached information located in Email. The CE provided security awareness training and enhanced access controls and email security. OCR provided technical assistance regarding the HIPAA Rules. No business associate was involved.
- Indiana State AGas victim2024-05-13
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-12 and was reported on 2024-05-13. 1 Indiana residents were affected.
- Indiana State AGas victim2024-04-19
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-09 and was reported on 2024-04-19. 2 Indiana residents were affected.
- Indiana State AGas victim2024-02-19
Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-22 and was reported on 2024-02-19. 1 Indiana residents were affected.
- INDIANAHHS OCRas victim2023-09-22
Indiana University Health reported to HHS on 2023-09-22 a Hacking/IT Incident affecting 4194 individuals. Breached information located on Network Server. A business associate experienced the incident, exposing names and treatment information. The business associate implemented additional technical and security safeguards.
- Indiana State AGas victim2023-08-31
Indiana University Health Plans, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-07 and was reported on 2023-08-31. 1,170 Indiana residents were affected. 1,191 individuals affected in total.
- INDIANAHHS OCRas victim2023-08-31
Indiana University Health (Health Plan, IN) reported to HHS on 2023-08-31 a Hacking/IT Incident affecting 1,191 individuals. A vendor of its business associate experienced a cyber-attack compromising PHI stored on a network server, including names, Social Security numbers, addresses, birthdates, claims information, and other treatment information. The CE and BA notified HHS, affected individuals, and the media, and provided credit monitoring services. Administrative and technical safeguards were strengthened.
- Indiana State AGas victim2023-08-04
Indiana University Health Plans, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-30 and was reported on 2023-08-04. 1,521 Indiana residents were affected.
- INDIANAHHS OCRas victim2023-08-04
Indiana University Health reported to HHS on 2023-08-04 a Hacking/IT Incident affecting 21,383 individuals. Breached information located on Network Server. A business associate experienced a cyber-attack exposing PHI including names, health insurance, and financial information.
- Indiana State AGas victim2023-07-21
Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-06-20 and was reported on 2023-07-21. 1 Indiana residents were affected.
- Indiana State AGas victim2023-04-17
Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-02-14 and was reported on 2023-04-17. 4 Indiana residents were affected. 465 individuals affected in total.
- Indiana State AGas victim2022-02-10
Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-01-12 and was reported on 2022-02-10. 1 Indiana residents were affected.
- Indiana State AGas victim2021-08-18
Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-07-14 and was reported on 2021-08-18. 1 Indiana residents were affected.
- Indiana State AGas victim2021-04-22
Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-04-16 and was reported on 2021-04-22. 1 Indiana residents were affected.
- New Hampshire State AGas victim2020-09-28
Indiana University Health Foundation notified NH AG of a third-party vendor (Blackbaud) breach. Unauthorized access occurred Feb-May 2020. 1 NH resident affected (name, address, SSN). Ransomware involved; ransom paid. Notification sent Sept 25, 2020.
Supply-chain cascadesreviewed and confirmed
- INDIANA UNIVERSITY HEALTH, INC.’s filing is one of at least 175 in the BLACKBAUD, INC. supply-chain incident (2020).