San Diego American Indian Health Center

San Diego American Indian Health Center disclosed a cybersecurity attack discovered on May 5, 2022. An unknown external actor gained access to the network and obtained personal information, including names, Social Security numbers, driver's license/state ID numbers, tribal ID numbers, medical information, health insurance information, and dates of birth. The organization engaged a cybersecurity firm, secured its environment, notified the FBI, and offered credit monitoring services to affected individuals.

San Diego American Indian Health Center reported a data breach to the Indiana Attorney General. The breach occurred on 2022-05-05 and was reported on 2022-08-15. 4 Indiana residents were affected. 27,367 individuals affected in total.

San Diego American Indian Health Center reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-08-15. 20 Massachusetts residents were affected. The report records the breach type as electronic.

San Diego American Indian Health Center disclosed a cybersecurity attack discovered on May 5, 2022. An unknown actor gained access to and obtained personal information including names, Social Security numbers, driver's license/state ID numbers, tribal ID numbers, medical information, health insurance information, and dates of birth. The organization engaged a cybersecurity firm, secured its network, notified the FBI, and offered credit monitoring services to affected individuals.

San Diego American Indian Health Center notified Montana residents of a cybersecurity attack discovered on May 5, 2022. An unknown actor accessed personal information including names, SSNs, driver's licenses, and medical/health insurance data. The organization engaged forensic investigators, notified the FBI, implemented security enhancements, and offered credit monitoring services.

San Diego American Indian Health Center (covered entity) reported a ransomware attack affecting PHI of 30,721 individuals. Information involved included names, addresses, dates of birth, driver's license and Social Security numbers, claims and financial information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media; provided free credit monitoring and identity protection; and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Rules.

San Diego American Indian Health Center experienced an external system breach (hacking) on May 5, 2022, discovered on July 22, 2022. The incident compromised the names and driver's license numbers of 27,367 individuals, including 3 Maine residents. The organization provided written notification on August 15, 2022, and offered 12 months of credit monitoring and identity theft protection services through IDX.