Skip to content
Network USA

HHS OCR report · 2020

Children's Minnesota data breach

Children's Minnesota, a healthcare provider in Minnesota, reported a breach affecting 160,268 individuals to HHS OCR on Sep 11, 2020.

OCR report facts

Covered entity
Children's Minnesota
Entity type
Healthcare Provider
Individuals affected
160,268
Submission date
Sep 11, 2020
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
Yes
Status
Archive (closed)

OCR description

The covered entity (CE), Children’s Minnesota, reported that its business associate (BA) experienced a ransomware attack affecting the electronic protected health information (ePHI) of approximately 160,268 individuals. The ePHI involved included names, addresses, dates of birth, and treatment information. The CE notified HHS, affected individuals, the media, and provided substitute notice.

Text as published on the HHS OCR breach portal.

Other reports by Children's Minnesota

HIPAA breach reports from the HHS OCR Breach Portal
Covered entityStateEntity typeIndividualsSubmittedType of breachStatus
Children's MinnesotaMNHealthcare Provider37,942Oct 25, 2019Unauthorized Access/DisclosureArchive (closed)

Frequently asked questions

How many people were affected by the Children's Minnesota data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Children's Minnesota legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Children's Minnesota.