Harbin Clinic reports hacking incident affecting 176,149 patients
Harbin Clinic, LLC, a healthcare provider in Georgia, reported a hacking/IT incident to HHS OCR on May 16, 2025. The breach affected 176,149 individuals after unauthorized access to a network server. This filing date is when the report was submitted to the government, not necessarily when the incident occurred. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current. While this specific event involves a provider, the risk of server-based attacks applies to all entities handling protected health information. Review your own security logs and vendor contracts to confirm adequate protections are in place against unauthorized access.
Sources differ:
- The HHS OCR portal lists 176,149 individuals for Harbin Clinic. Harbin's Maine Attorney General filing, as reported by HIPAA Journal and others, lists about 210,140, and describes the incident as a breach at its debt collector, Nationwide Recovery Service.
Primary source: HHS OCR Breach Portal — Harbin Clinic, LLC (GA) · reported 05/16/2025 · 176,149 individuals · Checked against the record 2026-10-22