HHS OCR breach portal (HIPAA breaches affecting 500 or more individuals) Primary notice
Posted on the HHS Office for Civil Rights breach portal with a submission date of June 21, 2024.
- Organization as reported
- Wisconsin Department of Health Services, WI
- Entity type as reported
- Healthcare Provider
- Category as reported
Hacking/IT Incident
- Location of information as reported
- Network Server
- Submission date
- June 21, 2024
- Observed by BreachRecords
- 2026-10-18 16:15 UTC (revision 9845, row:984)
- Archived copy
- Held in the private archive (provenance)
The covered entity (CE), Wisconsin Department of Health Services, reported that its business associate (BA) experienced a cyberattack that compromised the protected health information (PHI) of 19,150 individuals. The PHI involved included names, dates of birth, social security numbers, diagnoses/conditions, and other treatment information. The CE notified HHS and the media; the BA notified the affected individuals. In its mitigation efforts, the CE provided credit monitoring and established a call center for questions and concerns. The BA implemented additional administrative and technical safeguards to better protect sensitive data.