By HFT Staff

Clarinda Regional Health Center (Clarinda) experienced a data security incident that may affect the privacy of certain individuals’ data.  

On or around December 15, 2025, Clarinda learned that certain data within its network may have been accessed without authorization. In response, it promptly initiated an investigation and engaged cybersecurity experts to assist with the process. The investigation revealed that certain files may have been acquired by an unauthorized actor in or around October 23, 2025. After the investigation concluded, Clarinda undertook a comprehensive review of the relevant files with the assistance of a third-party vendor and determined that personal health information was involved. Clarinda then worked to secure the information needed to effectuate notice, including address information, for the impacted individuals. The process was completed on May 21, 2026. 

The accessible information varies by individual but may include an individual’s name in combination with a Social Security number, date of birth, medical information, health insurance information, financial account number, driver’s license number, and taxpayer identification number. Clarinda provided notice of this event to the potentially affected individuals beginning on June 1, 2026. 

Clarinda promptly investigated the event to ensure the continued security of its environment and the data it holds to understand the nature and scope of what occurred. Clarinda has implemented additional security measures to minimize the risk of a similar event occurring in the future.