SUMMA HEALTH
ent_019e0d4b458d0a96548713c66f92ac68
Disclosures
6
HHS OCR · State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7,989
nationwide · HHS OCR OH
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- SUMMA HEALTH
- Normalized
- summa health— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300N4NP4BSOJ08A82
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- OHIOHHS OCRas victim2025-01-10
Summa Health (OH) reported to HHS on 2025-01-10 an Unauthorized Access/Disclosure affecting 874 individuals. A workforce member impermissibly accessed PHI stored in Electronic Medical Records, including names, addresses, birthdates, Social Security numbers, diagnoses, lab results, medications, and other treatment information. The covered entity sanctioned the workforce member and implemented additional administrative safeguards. No business associate was involved.
- OHIOHHS OCRas victim2019-06-28
Summa Health (OH) reported to HHS on 2019-06-28 a Hacking/IT Incident (email phishing) affecting 7,989 individuals. Several employees were victims of an email phishing scheme. PHI exposed included names, dates of birth, Social Security numbers, health insurance information, email addresses, diagnoses/conditions, medications prescribed, and treatment information. The CE notified affected individuals, media, and provided substitute notice. OCR obtained assurances of corrective action. Breached information located on Email.
- Massachusetts State AGas victim2019-06-28
Summa Health reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-06-28. 1 Massachusetts residents were affected. The report records the breach type as electronic.
- OHIOHHS OCRas victim2019-06-28
Summa Health reported to HHS on 2019-06-28 a Hacking/IT Incident affecting 2904 individuals. Breached information located on Email. Employees were victims of an email phishing scheme exposing PHI including names, MRNs, DOB, SSN, driver's license, and financial data. The CE implemented safeguards and retrained staff.
- Oregon State AGas victim2019-06-28
Summa Health reported a data breach to the Oregon Attorney General. The breach was reported on 2019-06-28. The breach occurred during 3/11/2019 - 3/29/2019. The breach was discovered on 5/1/2019. 7,989 individuals were affected. Notice was sent on 6/28/2019.
- Illinois State AGas victim2019-01-01
SUMMA HEALTH filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-243). The register records the breach as discovered on May 1, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.