HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Oct. 19, 2020.
- Organization as reported
- Arkansas Methodist Medical Center, AR
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Oct. 19, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12578, row:3717)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Arkansas Methodist Medical Center, reported that its financial institution notified them that it had experienced a cyber-attack that affected the electronic protected health information (ePHI) of 4,916 individuals. OCR determined that the financial institution was not a business associate as defined by HIPAA and is therefore, not subject to the HIPAA Rules.