NorthShore Health Centers reports data breach affecting Indiana patients

What happened

• The breach involved unauthorized access to electronic protected health information.
• The incident was discovered during a routine security review.
• NorthShore Health Centers notified the Office for Civil Rights and began its breach notification process.
• Affected individuals will receive notice and free credit monitoring offers.

Why it matters

Healthcare providers handling similar patient data must verify their security controls and be prepared to meet HIPAA breach notification timelines.

Business impact

Organizations may need to allocate resources for forensic analysis, patient notifications, and potential remediation costs.

What to check

1. 1

   conduct risk assessmentHigh priority

   Evaluate the scope of the breach and determine the likelihood of harm to affected individuals.

2. 2

   notify individualsHigh priority

   Send breach notifications to all affected patients within 60 days of discovery as required by HIPAA.

3. 3

   report to OCRMedium priority

   File a breach report with the HHS Office for Civil Rights within the statutory timeframe.