HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of Dec. 23, 2025.
- Organization as reported
- Riverland Community Health, MN
- Entity type as reported
- Healthcare Provider
- Category as reported
Unauthorized Access/Disclosure
- Location of information as reported
- Network Server
- Submission date
- Dec. 23, 2025
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9062, row:201)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Riverland Community Health, reported that the subcontractor of its business associate (BA) experienced a hacking incident that affected the protected health information (PHI) of 940 individuals. The PHI involved demographic, healthcare provider, and health insurance information. The CE notified HHS and the affected individuals; the BA notified the media. In response to the breach, the CE and BA implemented additional technical and administrative safeguards.