Skip to content
Network USA

HHS OCR report · 2023

Iowa Department of Health and Human Services - Iowa Medicaid data breach

Iowa Department of Health and Human Services - Iowa Medicaid, a health plan in Iowa, reported a breach affecting 233,834 individuals to HHS OCR on May 30, 2023.

OCR report facts

Covered entity
Iowa Department of Health and Human Services - Iowa Medicaid
Entity type
Health Plan
State
Iowa
Individuals affected
233,834
Submission date
May 30, 2023
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
Yes
Status
Archive (closed)

OCR description

The covered entity (CE), Iowa Department of Health and Human Services - Iowa Medicaid, reported that its business associate (BA) was the victim of a cyber-attack affecting the protected health information (PHI) of 233,834. The PHI involved included names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, claims and financial information, diagnoses, medications, and dental records. The CE notified HHS, affected individuals, the media, and provided substitute notice....

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Iowa Department of Health and Human Services - Iowa Medicaid data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Iowa Department of Health and Human Services - Iowa Medicaid legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Iowa Department of Health and Human Services - Iowa Medicaid.