Advocate Aurora Health, Inc.

Advocate Aurora Health reported to HHS on 2022-10-14 a Unauthorized Access/Disclosure affecting 3,000,000 individuals. Breached information located on Electronic Medical Record. Web tracking technology transferred PHI to unauthorized recipients.

Advocate Aurora Health (WI) reported to HHS on 2021-12-28 a Loss affecting 1,729 individuals. A document containing PHI — including names, diagnoses, and other treatment information — was lost in the mail. Breached information was on Paper/Films. The CE notified HHS, affected individuals, and media; provided credit monitoring; sanctioned the responsible employee; and implemented technical safeguards.

Advocate Aurora Health reported to HHS on 2020-08-14 a Unauthorized Access/Disclosure affecting 1907 individuals. Breached information located on Paper/Films. An employee mailed documents containing PHI (names, addresses, health insurance, claims, treatment info) to wrong recipients. CE provided credit monitoring and implemented administrative safeguards.

Advocate Aurora Health (WI) reported to HHS OCR on 2020-04-16 a Hacking/IT Incident affecting 27,137 individuals. Several employees were victims of an email phishing scheme. PHI exposed via Email included names, addresses, dates of birth, driver's license numbers, SSNs, passport numbers, full face photographs, claims and financial information, health insurance information, diagnoses/conditions, lab results, medications prescribed, and other treatment information. Identity theft protection was offered; additional safeguards and workforce retraining were implemented.

Advocate Aurora Health reported a data breach to the Montana Attorney General. The breach was reported on 2020-02-20. The breach occurred on 1/1/2020. 26 Montana residents were affected.