Baptist Health

Baptist Health notified the NH Attorney General of a security incident at Baptist Health Medical Center-Drew County. Unauthorized access occurred between April 22 and July 8, 2024, affecting employee and dependent PII. Baptist Health became aware on July 8, 2024, engaged forensic investigators, notified law enforcement, and mailed notifications to 1 NH resident on Sept 30, 2024, offering Experian IdentityWorks.

Baptist Health reported a data breach to the Indiana Attorney General. The breach occurred on 2024-04-22 and was reported on 2024-09-30. 1 Indiana residents were affected. 1,823 individuals affected in total.

Baptist Health Arkansas reported to HHS on 2021-04-21 a Hacking/IT Incident affecting 16,765 individuals. Breached information located on Network Server. A business associate experienced a cyber-attack affecting ePHI including names and treatment information. The covered entity terminated its business relationship with the business associate.

Baptist Health (AR) reported to HHS OCR on 2018-05-07 an Unauthorized Access/Disclosure affecting 3,453 individuals. A physician stored patient PHI — including names, dates of birth, and treatment information — on a cloud-based file-sharing application without a Business Associate contract. Breached information was located on a Network Server/cloud storage. CE notified HHS, affected individuals, and media; subsequently improved safeguards, updated policies, and trained EHR users. OCR obtained corrective-action assurances.

Baptist Health System reported to HHS on 2013-01-22 a Unauthorized Access/Disclosure affecting 678 individuals. Breached information located on Electronic Medical Record.

Baptist Health System reported to HHS on 2012-05-04 a Improper Disposal affecting 1655 individuals. Breached information located on Paper/Films. A trash bag containing discarded appointment schedules was inadvertently removed from a shred bin by a cleaning service and disposed of in a dumpster without being shredded.