HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Aug. 31, 2018.
- Organization as reported
- Hopebridge, IN
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Submission date
- Aug. 31, 2018
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 13705, row:4844)
- Archived copy
- Held in the private archive (provenance)
On July 19, 2018, the covered entity (CE), Hopebridge, learned that an unauthorized actor may have gained access to some employees' email accounts between March and July 2018. This breach involved the clinical information of 1,411 individuals. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE formalized its incident response reporting procedure and trained staff on the new procedure. It also improved safeguards by implementing additional access controls, including two-factor authentication for all system administrators and executive staff. OCR obtained documented assurances that the CE implemented these corrective action steps.