University of Wisconsin Hospitals and Clinics Authority

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in June 2026 (case 26-06-1264). The register records the breach as discovered on May 12, 2026. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in April 2026 (case 26-04-1119). The register records the breach as discovered on February 26, 2026. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-992). The register records the breach as discovered on April 25, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-942). The register records the breach as discovered on October 22, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-774). The register records the breach as discovered on December 5, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in October 2025 (case 25-10-507). The register records the breach as discovered on April 11, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in October 2025 (case 25-10-526). The register records the breach as discovered on July 22, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in October 2025 (case 25-10-510). The register records the breach as discovered on June 6, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in September 2025 (case 25-09-478). The register records the breach as discovered on July 29, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in August 2025 (case 25-08-366). The register records the breach as discovered on July 9, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in July 2025 (case 25-07-319). The register records the breach as discovered on May 5, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in June 2025 (case 25-06-229). The register records the breach as discovered on February 17, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in May 2025 (case 25-05-155). The register records the breach as discovered on February 25, 2025. Personal information types reported: medical information. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSINN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in February 2025 (case 25-02-128). The register records the breach as discovered on December 6, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in August 2024 (case 24-08-041). The register records the breach as discovered on August 1, 2024. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

University of Wisconsin Hospitals and Clinics Authority reported to HHS on 2024-03-05 a Hacking/IT Incident affecting 85,902 individuals. Breached information located on Email. An employee was targeted by a phishing scheme exposing PHI including names, DOBs, addresses, and diagnoses.

UNIVERSITY OF WISCONSIN HOSPITALS AND CLINICS AUTHORITY filed a data-breach notice with the Illinois Attorney General in March 2024 (case 24-03-027). The register records the breach as discovered on September 20, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

University of Wisconsin Hospitals and Clinics Authority reported to HHS on 2021-06-18 a Hacking/IT Incident affecting 4563 individuals. Breached information located on Electronic Medical Record, Other. The cyber-attack affected PHI including names, dates of birth, addresses, claims, diagnoses, lab results, and medications. The entity notified HHS, individuals, and media, and implemented new policies, security awareness training, and additional safeguards.

UNIVERSITY OF WISCONSIN HOSPITALS & CLINICS filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-226). The register records the breach as discovered on April 20, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

The covered entity (CE), University of Wisconsin and Clinics Authority, reported that a survey was erroneously mailed to family members of 6,923 patients rather than to the patients directly. The breach occurred because of formatting problems sent in a data file to the CE’s business associate (BA). The PHI included patients’ names and the names of patients’ healthcare providers. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE initiated an internal investigation and developed an action plan to prevent similar disclosures, revised and redesigned processes for providing patient survey information, and trained pertinent staff on the new processes.

University of Wisconsin Hospitals and Clinics reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2010-02-22. 1 Massachusetts residents were affected. The report records the breach type as electronic.