The Johns Hopkins Health System Corporation

Johns Hopkins Health System Corporation reported to HHS on 2023-07-31 a Hacking/IT Incident affecting 2584 individuals. Breached information located on Network Server. The incident involved a malware attack compromising PHI (names, addresses, birthdates, treatment info). The CE provided credit monitoring and implemented technical safeguards.

The Johns Hopkins University and affiliated health systems experienced an external system breach (hacking) on May 29, 2023, discovered on May 31, 2023. The incident compromised names and Social Security Numbers of 363,885 individuals, including 43 Maine residents. Notification was sent on June 23, 2023, offering two years of credit monitoring.

Johns Hopkins Health System Corporation, and reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-25. 378 Massachusetts residents were affected. The report records the breach type as electronic.

Johns Hopkins University Health System Corporation notified the NH AG of a MOVEit file transfer vulnerability exploited on May 29, 2023. Unauthorized access led to document downloads affecting 47 NH residents. Notification letters were mailed June 23, 2023, offering credit monitoring. The vendor Progress Software disclosed the zero-day vulnerability on May 31, 2023.

The Johns Hopkins Health System Corporation reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-29 and was reported on 2023-06-23. 87 Indiana residents were affected. 363,885 individuals affected in total.