Breaches and incidents
IU Health Affiliated Covered Entity: vendor The AME Group’s legacy imaging system exploited, 2,080 affected
HIPAA Journal reports IU Health learned on 4 Aug 2026 that a previously unknown vulnerability affected an isolated legacy system run by IT vendor The AME...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- HIPAA Journal reports IU Health learned on 4 Aug 2026 that a previously unknown vulnerability affected an isolated legacy system run by IT vendor The AME Group; limited imaging center data (names, birth dates, health plan IDs, treatment information) of 2,080 people was accessed. Core systems and EHR were unaffected; individuals were notified 29 Sep 2026.
- Root cause: previously unknown vulnerability in a vendor-managed legacy system.
- No attacker named.
- IU Health verified the security of its systems.