INDIANA UNIVERSITY HEALTH, INC.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-12 and was reported on 2026-04-10. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-12 and was reported on 2026-04-10. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-17 and was reported on 2026-04-10. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2026-02-08 and was reported on 2026-03-13. 3 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-01 and was reported on 2025-06-23. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-10-04 and was reported on 2025-03-14. 481 Indiana residents were affected. 514 individuals affected in total.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-11-28 and was reported on 2025-01-27. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-27 and was reported on 2025-01-17. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-08-27 and was reported on 2025-01-02. 209 Indiana residents were affected. 214 individuals affected in total.

Indiana University Health, Affiliated Covered Entity (IN) reported to HHS on 2024-12-17 a Hacking/IT Incident (email phishing) affecting 19,827 individuals. An employee was targeted by a phishing scheme that compromised PHI including names, dates of birth, addresses, Social Security and driver's license numbers, diagnoses/conditions, and other treatment information. Breached information located in Email. The CE provided security awareness training and enhanced access controls and email security. OCR provided technical assistance regarding the HIPAA Rules. No business associate was involved.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-12 and was reported on 2024-05-13. 1 Indiana residents were affected.

Indiana University Health Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-09 and was reported on 2024-04-19. 2 Indiana residents were affected.

Indiana University Health, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-22 and was reported on 2024-02-19. 1 Indiana residents were affected.

Indiana University Health reported to HHS on 2023-09-22 a Hacking/IT Incident affecting 4194 individuals. Breached information located on Network Server. A business associate experienced the incident, exposing names and treatment information. The business associate implemented additional technical and security safeguards.

Indiana University Health (Health Plan, IN) reported to HHS on 2023-08-31 a Hacking/IT Incident affecting 1,191 individuals. A vendor of its business associate experienced a cyber-attack compromising PHI stored on a network server, including names, Social Security numbers, addresses, birthdates, claims information, and other treatment information. The CE and BA notified HHS, affected individuals, and the media, and provided credit monitoring services. Administrative and technical safeguards were strengthened.

Indiana University Health Foundation, Inc. reported an external system breach (hacking) occurring between February 7, 2020, and May 20, 2020, discovered on September 4, 2020. The incident affected 1,948 individuals, including one Maine resident. Personal information acquired included names and Social Security Numbers. The entity provided written notification and offered one year of credit monitoring and identity theft protection services through Experian.

Indiana University Health reported to HHS on 2017-11-03 an Improper Disposal affecting 1,399 individuals. Breached information located on Paper/Films. An individual found a plastic bag containing billing paperwork with PHI (names, DOB, diagnoses, procedures) at an intersection in Muncie, Indiana. The CE retrieved the bag, obtained an attestation that PHI was not used, notified HHS and individuals, established a call center, sanctioned the employee, and implemented additional safeguards.