25% off all training courses Offer ends May 29, 2026
View HIPAA Courses
25% off all training courses
View HIPAA Courses
Offer ends May 29, 2026

The HIPAA Journal is the leading provider of HIPAA training, news, regulatory updates, and independent compliance advice.

Wilbarger General Hospital & Ochsner LSU Health System Announce Data Breaches

Data breaches have been announced by Wilbarger General Hospital, a rural and community hospital in Vernon, Texas, and Ochsner LSU Health System – Regional Urology in northern Louisiana.

Wilbarger General Hospital

Wilbarger General Hospital, a rural and community hospital in Vernon, Texas, has recently announced a security incident involving unauthorized access to an employee’s email account.  Suspicious activity was identified within the account on October 20, 2025, and an investigation was launched to determine the cause of the activity. Assisted by third-party cybersecurity experts, Wilbarger General Hospital determined that an unauthorized third party had access to the email account for a short period, during which time information in the account may have been accessed or copied.

The affected account was reviewed to determine the extent to which patient data had been exposed, and on November 25, 2025, Wilbarger General Hospital confirmed that patients’ protected health information was present in the account. The substitute breach notice states that the review of the account is ongoing, and the types of data involved have yet to be publicly disclosed. At the time of publishing its data breach notice, Wilbarger General Hospital was unaware of any misuse of the exposed data. The affected individuals have been advised to remain vigilant against identity theft and fraud by monitoring their accounts, free credit reports, and explanation of benefits statements for signs of data misuse.

The incident is not yet shown on the website of the Attorney General of Texas or the HHS’ Office for Civil Rights data breach portal, so it is currently unclear how many individuals have been affected.

Get The FREE
HIPAA Compliance Checklist

Immediate Delivery of Checklist Link To Your Email Address

Please Enter Correct Email Address

Your Privacy Respected

HIPAA Journal Privacy Policy

Ochsner LSU Health – Regional Urology

Ochsner LSU Health System of North Louisiana – Regional Urology has disclosed a data security incident that has affected up to 4,519 patients. Suspicious activity was identified in a computer system on October 10, 2025, and assisted by third-party digital forensics experts, Ochsner LSU Health began an investigation to determine the nature and scope of the activity.

The investigation confirmed that, starting on October 5, 2025, an unauthorized third party had access to retired Regional Urology systems that were decommissioned in late 2022 and downloaded data from those systems. The breach was confined to the retired systems. No other parts of its network or any other Ochsner LSU Health systems were involved.

The retired systems were reviewed and found to contain protected health information such as names, Social Security numbers, dates of birth, medical record numbers, and information related to healthcare services received from Ochsner LSU Health – Regional Urology prior to December 31, 2022. That information may have included provider names, treatment dates, medical histories, medical imaging, and/or procedure information.

As a precaution against identity theft and fraud, Ochsner LSU Health – Regional Urology has offered complimentary credit monitoring and identity theft protection services to individuals whose Social Security numbers were involved.

Author: Steve Alder is the editor-in-chief of The HIPAA Journal. Steve is responsible for editorial policy regarding the topics covered in The HIPAA Journal. He is a specialist on healthcare industry legal and regulatory affairs, and has 10 years of experience writing about HIPAA and other related legal topics. Steve has developed a deep understanding of regulatory issues surrounding the use of information technology in the healthcare industry and has written hundreds of articles on HIPAA-related topics. Steve shapes the editorial policy of The HIPAA Journal, ensuring its comprehensive coverage of critical topics. Steve Alder is considered an authority in the healthcare industry on HIPAA. The HIPAA Journal has evolved into the leading independent authority on HIPAA under Steve’s editorial leadership. Steve manages a team of writers and is responsible for the factual and legal accuracy of all content published on The HIPAA Journal. Steve holds a Bachelor’s of Science degree from the University of Liverpool. You can connect with Steve via LinkedIn or email via stevealder(at)hipaajournal.com

x

Is Your Organization HIPAA Compliant?

Find Out With Our Free HIPAA Compliance Checklist

Get Free Checklist