Mankato Clinic, Ltd.

Mankato Clinic notified the NH Attorney General of a cybersecurity incident where information was accessed and taken from its network between August 12 and August 18, 2026. The clinic began investigating on August 18, 2026. The incident affected two New Hampshire residents. Compromised data included names, Social Security numbers, dates of birth, health insurance information, and medical records (diagnoses, treatments, prescriptions). Mankato Clinic engaged forensic investigators, notified law enforcement and HHS, and is offering 12 months of credit monitoring via Experian. The incident did not impact patient care.

Mankato Clinic notified individuals of a cyber event where information was accessed and taken between August 12 and August 18, 2026. The clinic began investigating on August 18, 2026. Affected data includes names, SSNs, health insurance info, DOB, and medical records. The incident did not impact patient care. The clinic engaged forensic investigators, secured systems, and is offering credit monitoring.

The Mankato Clinic was founded Mankato, Minnesota in 1916, by five area physicians who believed that a comprehensive, multi-specialty group practice offered the best means of providing quality health care to the residents of southern Minnesota. The mission of the Mankato Clinic is to improve the hea...

Mankato Clinic (MN) reported to HHS on 2021-09-16 an Unauthorized Access/Disclosure affecting 535 individuals. An employee accidentally sent an email containing ePHI — including names, addresses, dates of birth, financial information, and diagnoses/conditions — to the wrong recipient. The CE notified HHS, affected individuals, and the media, and provided substitute notice. Mitigation included sanctioning the responsible employee and retraining staff on ePHI safeguarding. Breached information located on Email.

Mankato Clinic reported to HHS on 2010-12-28 a Theft affecting 3159 individuals. Breached information located on Laptop.