Healthcare Provider · Archived
Grand River Medical Group
37,423 individuals · submitted February 12, 2021
About this report
Grand River Medical Group, the covered entity (CE), reported that an employee was the victim of an email phishing attack that compromised the protected health information (PHI) of 37,423 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, claims information, medications prescribed, and other treatment information. The CE notified HHS, affected individuals, the media, and provided complimentary credit monitoring services. In response to the breach, the CE strengthened its technical safeguards and retrained its staff on email security. OCR provided the CE with technical assistance regarding its HIPAA Security Rule obligations.
Summary as published by the HHS Office for Civil Rights.
- Organization
- Grand River Medical Group
- State
- IA
- Entity type
- Healthcare Provider
- Individuals affected
- 37,423
- Submission date
- February 12, 2021
- Breach type
- Hacking/IT Incident
- Location of information
- Business associate present
- No
- OCR status
- Archived
More breach reports in IA
IA · Sep 29, 2026
Martin Brother Distributing Company, Inc.
2,303 individuals
IA · Sep 21, 2026
Imagine the Possibilities
1,693 individuals
IA · Jul 31, 2026
Manning Regional Healthcare Center
746 individuals
IA · May 26, 2026
Wellmark Health Insurance
6,666 individuals
IA · Apr 16, 2026
Iowa Department of Health and Human Services
6,717 individuals
IA · Mar 25, 2026
Clarinda Regional Health Center
24,341 individuals
More Hacking/IT Incident reports
NY · Oct 9, 2026
Photon Health
30,625 individuals
CA · Oct 9, 2026
Allswell Health Medical Group PA
638 individuals
WA · Oct 8, 2026
Anup K. Deol, OD PS d/b/a Eye Care Center of Snohomish
3,059 individuals
NY · Oct 8, 2026
Cognitive Health Technologies LLC
49,467 individuals
GA · Oct 7, 2026
The Speech Clinic, LLC
2,168 individuals
PA · Oct 6, 2026
Secure Healthcare Information Management, LLC
6,810 individuals