Skip to content
Network USA

HHS OCR report · 2013

Lutheran Social Services of South Central Pennsylvania data breach

Lutheran Social Services of South Central Pennsylvania, a healthcare provider in Pennsylvania, reported a breach affecting 7,803 individuals to HHS OCR on May 20, 2013.

OCR report facts

Covered entity
Lutheran Social Services of South Central Pennsylvania
Entity type
Healthcare Provider
Individuals affected
7,803
Submission date
May 20, 2013
Type of breach
Hacking/IT Incident
Location of breached information
Network Server
Business associate present
No
Status
Archive (closed)

OCR description

This case involved a hacking incident on the covered entity’s (CE) network server. A Trojan virus was discovered running under an administrative account on a remote access server. No data loss was actually discovered, but potentially 7,300 records may have been vulnerable. The types of protected health information (PHI) potentially breached included demographic, financial, and clinical information. The CE engaged a forensic consulting team to verify the scope and impact of the malware and...

Text as published on the HHS OCR breach portal.

Frequently asked questions

How many people were affected by the Lutheran Social Services of South Central Pennsylvania data breach?
When was it reported to HHS?
What type of breach was it?
Is the investigation still open?
Is a breach notice letter from Lutheran Social Services of South Central Pennsylvania legitimate?

Source: HHS OCR Breach Portal, OCR export October 2026. Network USA is not affiliated with HHS or Lutheran Social Services of South Central Pennsylvania.