University of Nebraska Medical Center
ent_63e70aa591456eae56a3e39a
Disclosures
6
State AG · HHS OCR · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
216,472
nationwide · HHS OCR NE
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- University of Nebraska Medical Center
- Normalized
- university of nebraska medical center— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- unmc.edu
Disclosure history (6)newest first
- Nebraska State AGas victim2026-04-17
University of Nebraska Medical Center (UNMC) disclosed a breach of its REDCap application affecting 186 Nebraska residents. Unauthorized access occurred between September 20, 2023, and February 3, 2026, due to a vulnerability allowing remote access. Data potentially exposed includes names, SSNs, DOBs, medical record numbers, and PHI. UNMC took the app offline, engaged partners, notified residents in April 2026, and offered credit monitoring.
- NEBRASKAHHS OCRas victim2026-04-17
University of Nebraska Medical Center reported to HHS on 2026-04-17 a Hacking/IT Incident affecting 26937 individuals. Breached information located on Network Server.
- Illinois State AGas victim2026-04-01
UNIVERSITY OF NEBRASKA MEDICAL CENTER filed a data-breach notice with the Illinois Attorney General in April 2026 (case 26-04-1136). The register records the breach as discovered on March 25, 2026. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- NEBRASKAHHS OCRas victim2020-11-23
The Nebraska Medical Center and University of Nebraska Medical Center, Affiliated Covered Entities reported to HHS on 2020-11-23 a Hacking/IT Incident affecting 216,472 individuals. Breached information located on Network Server. The incident involved a ransomware attack encrypting PHI including names, addresses, SSNs, and diagnoses. The entity provided credit monitoring and enhanced security safeguards.
- New Hampshire State AGas reporting2019-12-02
Nebraska Medicine notified the New Hampshire Attorney General of an insider threat incident involving one NH resident. An employee accessed patient records outside job responsibilities between July 11, 2018, and October 1, 2019. The employee's access was terminated on October 2, 2019. The affected individual's demographic, government ID, and clinical data were viewed. Nebraska Medicine offered one year of credit monitoring and established a call center.
- NEBRASKAHHS OCRas victim2011-12-09
University of Nebraska Medical Center reported to HHS on 2011-12-09 a Theft affecting 611 individuals. Breached information located on Paper/Films.