HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) with a submission date of Nov. 20, 2020.
- Organization as reported
- Indian Health Council Inc., CA
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- Nov. 20, 2020
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 12492, row:3631)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Indian Health Council, Inc., reported that it was the victim of a ransomware attack that affected approximately 5,769 individuals. The electronic protected health information (ePHI) involved included names, birthdates, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE performed a comprehensive risk analysis and corresponding risk management plan and retrained employee on the requirement to protect the privacy and security of ePHI. involved included names, birthdates, health insurance information, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE performed a comprehensive risk analysis and corresponding risk management plan and retrained employee on the requirement to protect the privacy and security of ePHI.