Indiana Hemophilia and Thrombosis Center, Inc.

Your Personal Info Could Be

Exposed Online After

This Hospital Breach

Breach Description

The Indiana Hemophilia and Thrombosis Center, Inc. (IHTC) experienced a data breach due to a phishing attack that was discovered on January 4, 2022. This attack affected two employee email accounts and potentially compromised the personal information of approximately 4,750 individuals. The information involved may include demographic details and identifiable health information, with a very small number of Social Security numbers also included. However, the investigation did not find any unauthorized access to financial or bank account information.

In response to the incident, IHTC immediately reset the email account passwords for all employees and implemented additional security controls to prevent further unauthorized access. They are also providing further training to employees to better identify and avoid phishing communications.

As a precaution, IHTC is offering twelve months of free credit monitoring and identity protection services through IDX to the affected patients. They encourage patients to monitor their account statements and insurance records for signs of fraud or identity theft and to contact IDX for more information on the incident and the services provided.

The enrollment deadline for the free credit monitoring and identity protection services was June 4, 2022. IHTC has apologized for any inconvenience caused by the incident and remains available to discuss any questions or concerns regarding patient care[1].

Citations:

  1. https://www.ihtc.org/UserFiles/File/IHTC_Substitute-Notice.pdf
  2. https://partnersprn.org/assets/pdfs/PrivacyPolicy.pdf
  3. https://globalhealthequity.iu.edu/impact-map/hematology.html
  4. https://www.ihtc.org
  5. https://www.indeed.com/cmp/Indiana-Hemophilia-and-Thrombosis-Center-1
  6. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6850020/
  7. https://www.linkedin.com/company/indiana-hemophilia-&-thrombosis-center-inc-/life
  8. https://www.guidestar.org/profile/35-2047838
  9. https://techpoint.org/tech-directory/indiana-hemophilia-and-thrombosis-center-inc/
  10. https://www.indeed.com/cmp/Indiana-Hemophilia-and-Thrombosis-Center-1/reviews
  11. https://wfh.org/events-new/global-forum/
  12. https://projects.propublica.org/nonprofits/organizations/352047838/202033179349304778/full
  13. https://www.rush.edu/services/hemophilia-and-thrombophilia-care
  14. https://fr.linkedin.com/company/indiana-hemophilia-&-thrombosis-center-inc-/life
  15. https://pivotpointconsulting.com/insights/news/long-time-pivot-point-consulting-client-indiana-hemophilia-thrombosis-center-finds-strategic-and-operational-value-in-interim-cio-services/
  16. https://partnersprn.org/policy/terms-of-service.php
  17. https://www.glassdoor.com/Reviews/Indiana-Hemophilia-and-Thrombosis-Center-Reviews-E1198626.htm
Breach Submission Date Mar 04, 2022
Converted Entity Name Indiana Hemophilia and Thrombosis Center, Inc.
Converted Entity Type Healthcare Provider
State IN
Individuals Affected 2,575
Breach Type Hacking/IT Incident

Breach Information Location Email

Business Associate Present Yes