Intermountain Health

Intermountain Healthcare notified the NH AG of a third-party data incident involving its business associate, Elekta. Unauthorized access to PHI occurred between April 6-20, 2021. Data included names, scanned medical images, and potentially SSNs/DOB. 1 NH resident affected. Notice sent July 16, 2021.

Intermountain Healthcare, acting as a business associate, reported an external hacking incident that occurred on April 6, 2021, and was discovered on May 17, 2021. The breach affected 2 Maine residents, compromising their names and driver's license or non-driver ID card numbers. Intermountain Healthcare provided written notification to the affected individuals on July 16, 2021, and offered one year of credit monitoring and identity restoration services through Experian.

Intermountain Healthcare reported to HHS on 2021-07-16 a Hacking/IT Incident affecting 28,628 individuals. Breached information located on Electronic Medical Record, Network Server. A business associate experienced a ransomware attack affecting ePHI including names, SSNs, and medical images.

Intermountain Healthcare reported a data breach to the Indiana Attorney General. The breach occurred on 2021-04-06 and was reported on 2021-07-16. 3 Indiana residents were affected. 28,628 individuals affected in total.

Intermountain Healthcare reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-07-16. 8 Massachusetts residents were affected. The report records the breach type as electronic.

Intermountain Healthcare notified Montana residents of a data security incident involving its third-party vendor, Elekta. Unauthorized access to PHI occurred between April 6 and April 20, 2021. Data included names, scanned medical images, and potentially SSNs/DOB. No evidence of misuse found. Credit monitoring offered.

IHC Health Services, Inc. dba Intermountain Life Flight reported to HHS on 2013-04-26 a Unauthorized Access/Disclosure affecting 857 individuals. Breached information located on Other. An employee inadvertently uploaded documents containing PHI to an unsecured department website in October 2009.