Breaches and incidents
Eskenazi Health (Indianapolis): phishing from a trusted contact’s account led to cloud account breach, 1,604 affected
HIPAA Journal reports a threat actor took over a trusted business contact’s email, sent phishing emails, and an employee entered credentials on 3 Jun 2026...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- HIPAA Journal reports a threat actor took over a trusted business contact’s email, sent phishing emails, and an employee entered credentials on 3 Jun 2026, giving access to the employee’s cloud work account (identified 27 Jul 2026); 1,604 people were affected, with SSNs and substance use disorder information among the data.
- Root cause: credential phishing via a compromised trusted third-party account.
- No attacker named.
- The account was secured, protections added and credit monitoring offered.