Health Data Breach Tracker/IA

Business Associate · Archived

Iowa Health System d/b/a UnityPoint Health

1,421,107 individuals · submitted July 30, 2018

About this report

Iowa Health System dba UnityPoint Health, the covered entity (CE), reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 1,421,107 individuals. The PHI involved included names, dates of birth, Social Security and drivers’ license numbers, claims and financial information, diagnoses, lab results, medications, and other treatment information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In its mitigation efforts, the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data. All staff were retrained.

Summary as published by the HHS Office for Civil Rights.

Organization
Iowa Health System d/b/a UnityPoint Health
State
IA
Entity type
Business Associate
Individuals affected
1,421,107
Submission date
July 30, 2018
Breach type
Hacking/IT Incident
Location of information
Email
Business associate present
Yes
OCR status
Archived

More breach reports in IA

More Hacking/IT Incident reports