INDIANA UNIVERSITY HEALTH, INC.

Indiana University Health (Health Plan, IN) reported to HHS on 2023-08-31 a Hacking/IT Incident affecting 1,191 individuals. A vendor of its business associate experienced a cyber-attack compromising PHI stored on a network server, including names, Social Security numbers, addresses, birthdates, claims information, and other treatment information. The CE and BA notified HHS, affected individuals, and the media, and provided credit monitoring services. Administrative and technical safeguards were strengthened.

Affected (this filing): 1,191

Indiana University Health reported to HHS on 2023-09-22 a Hacking/IT Incident affecting 4194 individuals. Breached information located on Network Server. A business associate experienced the incident, exposing names and treatment information. The business associate implemented additional technical and security safeguards.

Affected (this filing): 4,194