Breaches and incidents
IMS Care Center (Phoenix, Arizona): email system breach exposes SSNs and medical data
Per HIPAA Journal, an unauthorized party accessed IMS Care Center’s email system on 17 and 18 Jun 2026.
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- Per HIPAA Journal, an unauthorized party accessed IMS Care Center’s email system on 17 and 18 Jun 2026; on 30 Sep 2026 it confirmed patient names, addresses, SSNs and medical information were exposed. Letters were mailed on 16 Oct 2026.
- Root cause: email compromise; method not disclosed.
- No attacker named.
- Response includes new technical safeguards, Sophos MDR, geographic restrictions on email access, phishing training and at least 12 months of credit monitoring. Count unclear.