The Johns Hopkins Health System Corporation data breach (2023)

Identity resolution

Canonical name: The Johns Hopkins Health System Corporation
Normalized: the johns hopkins health system— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: 549300D81FCFUS7TQR04
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (2)newest first

MARYLANDHHS OCRas victim2023-07-31
Johns Hopkins Health System Corporation reported to HHS on 2023-07-31 a Hacking/IT Incident affecting 2584 individuals. Breached information located on Network Server. The incident involved a malware attack compromising PHI (names, addresses, birthdates, treatment info). The CE provided credit monitoring and implemented technical safeguards.
⛰️New Hampshire State AGas victim2023-07-21
Johns Hopkins University Health System Corporation notified the NH AG of a MOVEit file transfer vulnerability exploited on May 29, 2023. Unauthorized access led to document downloads affecting 47 NH residents. Notification letters were mailed June 23, 2023, offering credit monitoring. The vendor Progress Software disclosed the zero-day vulnerability on May 31, 2023.

Subsidiary disclosures (1)filed by group companies

◈ These filings were made by or about subsidiaries of The Johns Hopkins Health System Corporation — not by The Johns Hopkins Health System Corporation itself. Corporate relationships are mapped from GLEIF relationship records and SEC Exhibit 21 filings.

Tracked subsidiaries✦ The Johns Hopkins Health System Corporation Master Trust

🦞Maine State AGvia The Johns Hopkins Health System Corporation Master Trust2023-07-25
The Johns Hopkins University and affiliated health systems experienced an external system breach (hacking) on May 29, 2023, discovered on May 31, 2023. The incident compromised names and Social Security Numbers of 363,885 individuals, including 43 Maine residents. Notification was sent on June 23, 2023, offering two years of credit monitoring.