On December 17, 2024, Indiana University Health Affiliated Covered Entity (“IU Health”) issued a press release disclosing that the organization recently experienced an email-related data breach. In this notice, Indiana University Health explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names, addresses, ages, medical record numbers, and medical information. Upon completing its investigation, Indiana University Health began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Indiana University Health Affiliated Covered Entity, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Indiana University Health data breach. For more information, please see our recent piece on the topic here.
What Caused the IU Health Data Breach?
The IU Health data breach was only recently announced, and more information is expected in the near future. However, Indiana University Health’s press release provides some important information on what led up to the breach. According to this source, on October 18, 2024, Indiana University Health learned that an employee’s email account may have been compromised. In response, Indiana University Health secured the email account and then launched an investigation with the help of outside cybersecurity experts.
Through this investigation, Indiana University Health confirmed that the unauthorized party had access to the employee email account between October 4, 2024 and October 18, 2024. During this time, the unauthorized party had access to emails and attachments containing confidential information belonging to certain individuals.
After learning that sensitive consumer data was accessible to an unauthorized party, Indiana University Health reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, address, age, medical record number, and medical information.
On December 17, 2024, Indiana University Health began sending out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Indiana University Health
Indiana University Health is the largest healthcare system in Indiana, providing comprehensive medical services through its extensive network of hospitals, physician practices, and outpatient facilities. Headquartered in Indianapolis, Indiana University Health is affiliated with the Indiana University School of Medicine, enabling it to both treat patients and engage in research. Indiana University Health offers a full spectrum of healthcare services, including primary care, specialty care, cancer treatment, cardiovascular care, neurosciences, and transplant services. The system operates over 16 hospitals and numerous clinics across the state, serving millions of patients annually. Indiana University Health employs approximately 14,000 people and generates an estimated $4 billion in annual revenue.
