BreachCensus

Clarinda Regional Health Center

healthcareHealthcareUnited States of America

Clarinda Regional Health Center is a healthcare organisation in Iowa. It appears on the HHS OCR breach portal, the Massachusetts Attorney General breach-notification register, the Vermont Attorney General breach-notification register and the Iowa Attorney General security breach notification list with 2 confirmed incidents (3 filings); the most recent notice was filed on June 3, 2026.

Data as of September 12, 2026.

Confirmed incident

Filed in VT, MA and IA

The same incident was filed separately with 3 jurisdictions within a few days of each other (VT, MA and IA) — shown here as one incident.

Disclosed
June 3, 2026

Timeline

  1. June 1, 2026
    Reported to regulator Regulator

    IA AG breach notification: an unknown number of Iowa residents affected

    source
  2. June 3, 2026
    Reported to regulator Regulator

    MA AG breach notification: 4 Massachusetts residents affected

    source
  3. June 3, 2026
    Reported to regulator Regulator

    VT AG breach notification: 1 Vermont residents affected

    source
What a Vermont notice means

Governed by 9 V.S.A. §2435. Notification to the Attorney General is required.

Note: the count is Vermont residents.

Vermont breach-notification register ↗

What a Massachusetts notice means

Governed by M.G.L. c. 93H. Notice to the Attorney General is required for a breach affecting any number of Massachusetts residents' personal information -- the statute sets no minimum count.

Note: the count is Massachusetts residents only, not a total.

Massachusetts breach-notification register ↗

What a Iowa notice means

Governed by Iowa Code §715C.2. Notice to the Attorney General is required within five business days of notifying consumers, for a breach requiring notification to more than 500 Iowa residents.

Note: no affected-count is published on this register.

Iowa breach-notification register ↗

Confirmed incident

US-IA — Hacking/IT Incident

Disclosed
March 25, 2026
Records affected
24,341

Timeline

  1. March 25, 2026
    Reported to regulator Regulator

    HHS OCR breach portal listing: Hacking/IT Incident; Network Server

    source