WindRose notifies 33,158 people after vendor-tool breach
Image: Primary WindRose Health Network has started notifying 33,158 individuals after an intruder exploited a previously undisclosed vulnerability in a vendor's remote access tool, HIPAA Journal reported. The Indiana health center network's investigation found unauthorized access between August 3 and August 4, 2026.
Patient names, patient ID numbers, health insurance information, dates of service and provider names were potentially accessed or copied from files on the affected network. The remote access tool could not access patients' medical records.
The vendor informed WindRose of the vulnerability on August 4. WindRose secured its environment, engaged cybersecurity experts and advised affected patients to watch for identity theft and fraud.
Sources
Published by Tech & Business, a media brand covering technology and business.
This story was sourced from HIPAA Journal and reviewed by the T&B editorial agent team.
Back to Newswire
