Skip to content
Eskenazi Health Faces Data Breach from Phishing Attack Exposing Sensitive Patient Data

Eskenazi Health Faces Data Breach from Phishing Attack Exposing Sensitive Patient Data

First seen 30 Sep 2026, 18:33 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 30, 2026 at 19:29 UTC
  • •Phishing attack compromised an employee's cloud account, exposing sensitive patient data.
  • •Unauthorized access lasted from June 1 to July 27, 2026, before being detected.
  • •Eskenazi Health is providing identity protection services to affected individuals.

Eskenazi Health disclosed a data breach that exposed patients' Social Security numbers and medical information due to a phishing attack. The breach initiated when a trusted business's email account was compromised, leading to unauthorized emails sent to individuals, including an Eskenazi Health employee. The employee, believing the email was legitimate, clicked a link and completed an authentication process, granting access to their cloud-based work account. Unauthorized access occurred from June 1, 2026, until July 27, 2026, when the suspicious activity was discovered. Affected data includes names, Social Security numbers, medical record numbers, and sensitive health information. Eskenazi Health is investigating the incident, has secured the affected account, and is offering identity protection services to those impacted. Notifications have been sent to affected individuals, and a law firm is investigating the breach.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-06-01
Unauthorized access begins
An unauthorized individual gained access to an Eskenazi Health employee's account via a phishing attack.
Teiss
2026-07-27
Suspicious activity discovered
Eskenazi Health detected the unauthorized access and cut off the attacker's access to the account.
Teiss
2026-09-29
Breach disclosed
Eskenazi Health publicly disclosed the data breach and the details surrounding it.
Claimdepot

More articles in this cluster (2)

Following this threat?

Track Eskenazi Health in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What types of data were exposed?
The breach exposed names, Social Security numbers, medical record numbers, health insurance information, and sensitive health information.
How long did the unauthorized access last?
Unauthorized access occurred from June 1, 2026, until July 27, 2026.
What steps is Eskenazi Health taking in response?
Eskenazi Health has secured the affected account, is investigating the breach, and is offering identity protection services to affected individuals.