From ClingantryAI Health Regulator News

A Business Associate named Unlimited Technology Systems, LLC reported a hacking/IT incident to HHS OCR on July 21, 2026. The filing indicates that 3,803,750 individuals were affected. The unauthorized access occurred on a network server. Because the entity is a Business Associate, your organization may be impacted if you contract with this vendor for services involving protected health information. Review your vendor contracts and security logs to determine if you are among the affected clients. This submission date is when the report was filed, not necessarily when the breach occurred or was discovered.

Counseling Center of Wayne & Holmes Counties, a healthcare provider in Ohio, submitted a breach report to HHS OCR on 02/09/2026. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 83,354 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred or was discovered. Healthcare administrators in Ohio should review their own security controls for network servers and ensure their incident response plans are current. This entry concerns a specific provider and does not impose new obligations on other entities beyond standard HIPAA compliance requirements.

A healthcare provider named Harbor has filed a report with HHS OCR regarding a hacking/IT incident. The breach involved unauthorized access to a network server, potentially exposing the protected health information of 216,000 individuals. The filing was submitted on September 30, 2025. As a covered entity, Harbor is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for notifications if their patients may be members of this organization, and review their own vendor contracts to ensure business associates have robust security measures for network servers.

Kettering Adventist Healthcare, a healthcare provider in Ohio, filed a breach report with HHS OCR on July 21, 2025. The filing indicates a hacking/IT incident compromised data on a network server, affecting 1,695,382 individuals. This submission date is when the report was sent to regulators, not necessarily when the breach occurred or was discovered. As a covered entity, the provider is required to notify affected individuals and the Department of Health and Human Services. Healthcare administrators should monitor for official notifications if they serve patients in this region or have data-sharing agreements with the organization.

Health Services LLC, a healthcare provider in Ohio, submitted a breach filing to HHS OCR on 04/01/2025. The incident involved a hacking/IT incident targeting a network server. The filing indicates that 75,906 individuals were affected. This submission date reflects when the report was filed, not necessarily when the breach occurred. Providers and business associates should review their own security logs for similar unauthorized access patterns. The organization is classified as a covered entity under HIPAA. This entry serves as a notice of a reported incident for tracking purposes.