United Regional Health Care System

ent_e2cce054eacdf070faecc971

Compliance scorecard →View in feed →

Disclosures

HHS OCR · State AG · Leak Site · 5 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

36,900

nationwide · HHS OCR TX

Leak-site claims

unverified actor claims

Identity resolution

Canonical name: United Regional Health Care System
Normalized: united regional health care system— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: unitedregional.org

Disclosure history (7)newest first

TEXASHHS OCRas victim2024-01-26
United Regional Health Care System reported to HHS on 2024-01-26 a Hacking/IT Incident affecting 36900 individuals. Breached information located on Network Server. A business associate experienced a security vulnerability exposing PHI (names, addresses, DOB, diagnoses). CE provided credit monitoring.
Massachusetts State AGas victim2023-12-04
United Regional Health Care Systems reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-04. 4 Massachusetts residents were affected. The report records the breach type as electronic.
GLOBALLeak Siteas victim2023-07-05
Home - United Regional Health Care System
GLOBALLeak Siteas victim2020-06-21
unitedregional.org
Montana State AGas victim2020-02-14
United Regional Health Care System notified patients that in July 2019, an unauthorized individual accessed an employee email account containing PHI. The incident was discovered in July 2019, investigated with forensic assistance, and notifications were sent in February 2020. No SSN was involved; misuse is unconfirmed.
TEXASHHS OCRas victim2020-02-14
United Regional Health Care System reported to HHS on 2020-02-14 a Hacking/IT Incident affecting 1893 individuals. Breached information located on Email. An employee was victim of an email phishing scheme exposing patient ePHI including names, SSNs, driver's license numbers, passport data, health insurance info, DOB, and treatment/clinical information. The CE implemented additional safeguards and retrained workforce on fraud identification.
Illinois State AGas victim2020-01-01
UNITED REGIONAL HEALTH CARE SYTEM filed a data-breach notice with the Illinois Attorney General during 2020 (case 20-061). The register records the breach as discovered on July 1, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.