Harbin Clinic reports hacking incident affecting 176,149 patients
Harbin Clinic, LLC, a healthcare provider in Georgia, reported a hacking/IT incident to HHS OCR on May 16, 2025. The breach affected 176,149 individuals after unauthorized access to a network server. This filing date is when the report was submitted to the government, not necessarily when the incident occurred. Healthcare administrators should monitor for similar threats to their own network servers and ensure their incident response plans are current. While this specific event involves a provider, the risk of server-based attacks applies to all entities handling protected health information. Review your own security logs and vendor contracts to confirm adequate protections are in place against unauthorized access.
Sources differ:
- The HHS OCR breach portal filing for Harbin Clinic lists 176,149 individuals affected; the Maine Attorney General's data breach notification for the same underlying incident (a breach at vendor Nationwide Recovery Services) lists 210,140 individuals affected nationwide. Government source