San Diego American Indian Health Center

San Diego American Indian Health Center disclosed a cybersecurity attack discovered on May 5, 2022. An unknown actor gained access to and obtained personal information including names, Social Security numbers, driver's license/state ID numbers, tribal ID numbers, medical information, health insurance information, and dates of birth. The organization engaged a cybersecurity firm, secured its network, notified the FBI, and offered credit monitoring services to affected individuals.

San Diego American Indian Health Center reported a data breach to the Montana Attorney General. The breach was reported on 2022-08-15. The breach occurred on 5/5/2022. 28 Montana residents were affected.

Affected (this filing): 28

San Diego American Indian Health Center (covered entity) reported a ransomware attack affecting PHI of 30,721 individuals. Information involved included names, addresses, dates of birth, driver's license and Social Security numbers, claims and financial information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, and the media; provided free credit monitoring and identity protection; and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance regarding the HIPAA Rules.

Affected (this filing): 30,721

San Diego American Indian Health Center experienced an external system breach (hacking) on May 5, 2022, discovered on July 22, 2022. The incident compromised the names and driver's license numbers of 27,367 individuals, including 3 Maine residents. The organization provided written notification on August 15, 2022, and offered 12 months of credit monitoring and identity theft protection services through IDX.

Affected (this filing): 27,367