Healthcare Provider · Archived
University of Iowa Hospitals & Clinics
5,292 individuals · submitted June 22, 2017
About this report
A student employee used an online open source programming tool, GitHub, to program a data transfer, but failed to label his programming as private. This exposed the protected health information of 5,292 individuals online for more than a year until the covered entity (CE) discovered it on April 29, 2017. The CE provided breach notification to HHS, affected individuals, and the media. Following the breach, the CE updated its Security Rule Risk Management Plan, implemented periodic technical and nontechnical evaluations, and retrained its workforce members. OCR obtained documented assurances that the CE implemented the corrective actions listed.
Summary as published by the HHS Office for Civil Rights.
- Organization
- University of Iowa Hospitals & Clinics
- State
- IA
- Entity type
- Healthcare Provider
- Individuals affected
- 5,292
- Submission date
- June 22, 2017
- Breach type
- Unauthorized Access/Disclosure
- Location of information
- Other
- Business associate present
- No
- OCR status
- Archived
More breach reports in IA
IA · Sep 29, 2026
Martin Brother Distributing Company, Inc.
2,303 individuals
IA · Sep 21, 2026
Imagine the Possibilities
1,693 individuals
IA · Jul 31, 2026
Manning Regional Healthcare Center
746 individuals
IA · May 26, 2026
Wellmark Health Insurance
6,666 individuals
IA · Apr 16, 2026
Iowa Department of Health and Human Services
6,717 individuals
IA · Mar 25, 2026
Clarinda Regional Health Center
24,341 individuals
More Unauthorized Access/Disclosure reports
OR · Oct 8, 2026
AllCare Health, Inc.
782 individuals
CA · Oct 6, 2026
Nabi Health, Inc.
783 individuals
AL · Sep 25, 2026
Vascular Associates of South Alabama
623 individuals
GA · Sep 25, 2026
Source Care Management, LLC d/b/a NextStep Care
685 individuals
OK · Sep 18, 2026
OU Medicine, Inc.
854 individuals
NH · Sep 17, 2026
Project Belle, LLC
840 individuals