Northwestern Health Sciences University data breach (2019)

Breach window

Oct 16, 2018

When the intrusion reportedly occurred, per the linked filings

217 days

MNHHS OCRFirst filing

Filed May 21, 2019bd_2efc6238729c25cc

Northwestern Health Sciences University (NHSU) in MN reported to HHS OCR on 2019-05-21 a Hacking/IT Incident (email phishing attack) affecting 1,198 individuals. PHI exposed included names, Social Security numbers, drivers' license numbers, passport information, diagnostic/treatment information, medications prescribed, and health insurance information. Breached information located on Email. The CE notified HHS, affected individuals, and the media, and offered complimentary credit monitoring. Additional safeguards and staff retraining were implemented. OCR obtained corrective action assurances.

Affected (this filing): 1,198

HHS notified

🦬Montana State AGMost recentlinked via same-victim cross-source · 100%

Filed May 21, 2019bd_4ead8eeefe72a2c4

Northwestern Health Sciences University reported a data breach to the Montana Attorney General. The breach was reported on 2019-05-21. The breach occurred from 10/16/2018 to 12/10/2018. 19 Montana residents were affected.

Affected (this filing): 19

Northwestern Health Sciences University

Litigation Timing

Sensitive data

Timeline