Indiana Sues Schneck Medical Center Over 2021 Data Breach (1)

Indiana-based Schneck Medical Center failed to protect the personal health information of nearly 90,000 people in a September 2021 ransomware attack and data breach, the state of Indiana said in a HIPAA enforcement lawsuit.

The hospital, known formally as Jackson County Schneck Memorial Hospital, failed to take adequate measures to protect patients’ information despite having actual knowledge of deficiencies in its data-security systems following a December 2020 risk analysis that brought many critical security issues to light, the state alleged.

Schneck Medical Center said in a statement that it had reached an agreement with the Indiana attorney general’s office “concerning ...