HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of July 22, 2021.
- Organization as reported
- Thomas Jefferson University Hospital, PA
- Entity type as reported
- Business Associate
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- July 22, 2021
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 11990, row:3129)
- Archived copy
- Held in the private archive (provenance)
Thomas Jefferson University Hospital, the covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 1,346 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, diagnoses/conditions, medications prescribed, and other treatment information. The CE notified HHS, the media, and provided substitute notice. The BA notified the affected individuals and provided complimentary credit monitoring services and implemented a call center for questions or concerns. In its mitigation efforts, the BA implemented additional administrative and technical safeguards to better protect its PHI.