Back to the register
Thomas Jefferson University Hospital
ArchivedSubmitted 07/22/2021
Updated 15 hours ago ()
- State
- PA
- Covered entity type
- Business Associate
- Individuals affected
- 1,346
- Business associate present
- Yes
- Type of breach
- Hacking/IT Incident
- Location of breached information
- Network Server
- First seen by InfoSec Signals
- Sep 23, 2026
- Last seen in OCR export
- Oct 25, 2026
OCR description
Thomas Jefferson University Hospital, the covered entity (CE), reported that its business associate (BA) experienced a cyber-attack that affected the protected health information (PHI) of 1,346 individuals. The PHI involved included names, addresses, Social Security numbers, dates of birth, diagnoses/conditions, medications prescribed, and other treatment information. The CE notified HHS, the media, and provided substitute notice. The BA notified the affected individuals and provided complimentary credit monitoring services and implemented a call center for questions or concerns. In its mitigation efforts, the BA implemented additional administrative and technical safeguards to better protect its PHI.
Change history
- Sep 23, 2026Added to OCR's archive list
Source: HHS OCR Breach Portal, U.S. Department of Health and Human Services, Office for Civil Rights about this source
Records are reproduced as published; entity names and figures are OCR's.