The Nebraska Medical Center
ent_019e0c91cef9d16d46a92b5823375dbc
Disclosures
4
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
1,311
nationwide · HHS OCR NE
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The Nebraska Medical Center
- Normalized
- the nebraska medical center— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300U4S0U4KHGZDN84
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Montana State AGas victim2021-02-05
Nebraska Medical Center notified patients of a breach where unauthorized access occurred between Aug 27 and Sep 20, 2020. Malware was deployed and patient PHI (names, SSNs, DOB, medical records) was acquired. Discovered Sep 20, 2020. Credit monitoring offered.
- Illinois State AGas victim2021-01-01
THE NEBRASKA MEDICAL CENTER filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-044). The register records the breach as discovered on September 20, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- NEBRASKAHHS OCRas victim2020-05-05
The Nebraska Medical Center reported to HHS on 2020-05-05 an Unauthorized Access/Disclosure affecting 1,311 individuals. Breached information located on Electronic Medical Record. An employee impermissibly accessed PHI including names, addresses, diagnoses, and treatment info. The entity notified HHS, individuals, and media, established a call center, sanctioned the employee, and strengthened administrative safeguards.
- Illinois State AGas victim2020-01-01
THE NEBRASKA MEDICAL CENTER filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-188). The register records the breach as discovered on March 12, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.