[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fz9ignmpmf6j3":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":30,"seoTitle":31,"seoTitleEn":32,"seoDescription":31,"seoDescriptionEn":33,"logoUrl":34,"isVerified":4,"isSensitive":4,"isSpamList":35,"isMalware":35,"company":36},"6a70c855942721880f7d23a3","MarshfieldClinic2025","Marshfield Clinic 2025 Data Breach","marshfield-clinic-2025","marshfieldclinic.org","2025-08-26T00:00:00.000Z","2026-08-03T16:56:52.460Z","HHS OCR and independent local reporting quoting the organization","https:\u002F\u002Focrportal.hhs.gov\u002Focr\u002Fbreach\u002Fbreach_report.jsf",[14,16],"https:\u002F\u002Fwww.wsaw.com\u002F2025\u002F11\u002F13\u002Fmarshfield-clinic-investigating-unauthorized-access-employee-email-accounts\u002F",35952,"known",null,"people","Medium",[23,24,25,26,27,28,29],"Names","Physical addresses","Phone numbers","Dates of birth","Health insurance information","Medical record numbers","Medical information","\u003Cp>\u003Cstrong>The Marshfield Clinic data breach\u003C\u002Fstrong> was a 2025 security incident involving unauthorized access to certain employee email accounts. Access occurred between August 26 and August 27, 2025, and the organization identified unusual activity on August 27. HHS OCR reports 35,952 affected people.\u003C\u002Fp>\u003Ch2>How did the Marshfield Clinic data breach happen?\u003C\u002Fh2>\u003Cp>Marshfield Clinic opened an investigation after detecting unusual activity in some employee email accounts. The review determined that the accounts were accessed without authorization between August 26 and August 27.\u003C\u002Fp>\u003Cp>Public statements do not disclose how the accounts were compromised or whether a vulnerability was exploited. The incident is therefore not attributed to an unconfirmed attack method or threat actor.\u003C\u002Fp>\u003Ch2>What information may have been affected?\u003C\u002Fh2>\u003Cp>The categories varied by person. The organization's statement lists names, addresses, phone numbers, dates of birth, insurance identification numbers, medical-record numbers, dates of service, treatment or diagnosis information, laboratory results, and medication information.\u003C\u002Fp>\u003Cp>Not every category applied to every person. Public sources are not consistent about Social Security numbers, and that field is not confirmed in the organization statement; it is therefore excluded from the catalog's data classes.\u003C\u002Fp>\u003Ch2>How many people were affected?\u003C\u002Fh2>\u003Cp>The current HHS OCR entry reports 35,952 affected individuals for the email incident involving Marshfield Clinic Health System. The federal entry was submitted on November 7, 2025.\u003C\u002Fp>\u003Ch2>What risks can this information create?\u003C\u002Fh2>\u003Cp>Medical-record numbers, diagnoses, medications, and insurance identifiers can increase the risk of targeted healthcare fraud or medical-identity misuse. Addresses, phone numbers, and dates of birth can make a message imitating a real patient communication appear more credible.\u003C\u002Fp>\u003Ch2>How did the organization respond?\u003C\u002Fh2>\u003Cp>Marshfield Clinic said it conducted a comprehensive review to identify affected information and would notify appropriate individuals by letter. The organization also offered complimentary identity-monitoring services to affected people.\u003C\u002Fp>\u003Ch2>What should affected people do?\u003C\u002Fh2>\u003Cp>Notice recipients can monitor health-insurance statements, medical bills, and patient-portal activity for unfamiliar transactions. For an unexpected message claiming to come from Marshfield Clinic or an insurer, use contact details from the organization's official website rather than a link supplied in the message.\u003C\u002Fp>","","Marshfield Clinic Data Breach (36 Thousand People Affected)","The Marshfield Clinic data breach affected 35,952 people and may have exposed contact, insurance, and medical information.","\u002Fuploads\u002Flogo\u002Fmarshfield-clinic-official.png",false,{"name":37,"sector":38,"country":39,"website":40,"websiteArchiveUrl":31,"websiteStatus":31,"websiteCheckedAt":19},"Marshfield Clinic","Healthcare","United States","https:\u002F\u002Fwww.marshfieldclinic.org\u002F"]