South Dakota healthcare breach data

A breach can involve an organization located in one state while notices about the same event appear through several other states. This page keeps those apart: 2 events involve an organization located in South Dakota, and 11 appear through South Dakota notice activity. Reconciled from 14 source records under Canonical Data Model 1.1.

Events at organizations located in South Dakota

Events with South Dakota notice activity

365K

Reported affected, event totals

Hacking / IT incident

Most common mechanism

The two counts above answer different questions and are not added together: one says the breached organization is located in South Dakota, the other says a notice about the event appears through South Dakota. Neither states where an incident physically happened, which these sources do not establish. Reported affected is an event total, not a count of South Dakota residents: unless a source scopes its figure to one state, it covers everyone the breach affected anywhere. For the same reason state figures do not sum to the national total — one breach reported through several jurisdictions is one event appearing under each of them. How these numbers are calculated.

Recent events

Latest breach events reported in South Dakota

Jun 6, 2025·25,398 reported affected·Hacking / IT incident·1 source record
Huron Regional Medical Center, Inc.
Reported to HHS OCR.
Mar 31, 2025·106,763 reported affected·Hacking / IT incident·1 source record
Black Hills Regional Eye Institute
Reported to HHS OCR.
Date not reported·60,000 reported affected·Phishing / social engineering·1 source record
Avera Health
Avera Health notified patients of a data breach resulting from a phishing campaign affecting employee emails.
Date not reported·15,000 reported affected·Unknown mechanism·1 source record
Mount Rushmore Diagnostics
A data entry error by Mount Rushmore Diagnostics led to incorrect patient lab results being sent to unauthorized individuals.
Date not reported·3,000 reported affected·Misconfiguration·2 source records·Limited evidence
Mount Rushmore Healthcare
Unintentional upload of patient demographic files to a public-facing server.
Date not reported·10,000 reported affected·Unknown mechanism·1 source record
Mount Rushmore Medical Devices
Firmware vulnerability exploited to access device usage logs containing limited patient identifiers.
Date not reported·85,000 reported affected·Phishing / social engineering·1 source record
Prairie Lakes Healthcare System
Prairie Lakes Healthcare System reported a data breach resulting from a phishing attack that compromised employee email accounts. The attack led to unauthorized access to patient data, including clinical and demographic information.
Date not reported·18,000 reported affected·Hacking / IT incident·1 source record
Rushmore Medical Devices
Rushmore Medical Devices experienced a data breach where a database containing customer and limited clinical trial participant information was inadvertently exposed online.
Date not reported·4,000 reported affected·Phishing / social engineering·1 source record
Sioux Falls Pharmacy
Phishing attack led to compromise of employee email accounts, exposing prescription data.
Date not reported·10,000 reported affected·Misconfiguration·1 source record
South Dakota Behavioral Health
Unauthorized access to an unsecured cloud storage bucket containing patient therapy notes.
Date not reported·1,000 reported affected·Unknown mechanism·1 source record
South Dakota Community Hospital
Human error in mailing led to patient statements being sent to incorrect addresses.
Date not reported·1,800 reported affected·Hacking / IT incident·1 source record
South Dakota Community Pharmacy
Unauthorized access to pharmacy management system due to weak passwords.

Most affected entities

Organizations in South Dakota by breach events

Black Hills Regional Eye Institute

event

106.8K

reported affected

Prairie Lakes Healthcare System

event

85K

reported affected

Avera Health

event

60K

reported affected

Huron Regional Medical Center, Inc.

event

25.4K

reported affected

South Dakota Health Partners

event

25K

reported affected

Incident mechanisms

How breaches happen in South Dakota

How the 13 canonical breach events with a South Dakotasource record were caused, as stated by the reporting source. An event is counted once regardless of how many times it was filed.

Hacking / IT incident5 (38%)
Phishing / social engineering3 (23%)
Unknown mechanism3 (23%)
Misconfiguration2 (15%)

South Dakota compliance requirements

South Dakota breach notification law

Beyond federal HIPAA requirements, South Dakota has its own breach notification law that may impose additional obligations on healthcare practices operating in the state.

S.D. Codified Laws § 22-40-19 et seq.

Primary-source re-verification pending

South Dakota's state-specific breach notification requirements are undergoing primary-source re-verification. Precise deadline and regulator values are suppressed until current statutory text is confirmed against the state legislature or code publisher. Federal HIPAA's 60-day individual-notice deadline applies to covered entities in every state and is unaffected by that re-verification.

This is a general reference based on current South Dakota law. Consult legal counsel for state-specific compliance obligations. Source: S.D. Codified Laws § 22-40-19 et seq. Per-jurisdiction verification status and primary-source references are shown on each specialty/state compliance page.

Protect your South Dakota practice

13 breach events in South Dakota. Is your practice next?

Patient Protect gives independent practices real-time compliance monitoring, breach prevention, and secure workflows — so your practice stays out of this database. Starting at $39/month.

Start free trial Get your Patient Protect Score — free

14-day free trial · No charge until trial ends

FAQ

Healthcare breaches in South Dakota

How many healthcare data breaches have been reported in South Dakota?

2 canonical breach events involve an organization located in South Dakota, and 11 appear through South Dakota notice activity. Those are different relationships and are not added together — a breach at an organization elsewhere can be notified through South Dakota. Together the events on this page report 365K individuals affected, an event total counting everyone each breach affected anywhere, not a count of South Dakota residents. Sourced from HHS OCR breach reports and state attorney general notices, reconciled under Patient Protect Canonical Data Model 1.1. Updated nightly.

What is the most common breach mechanism in South Dakota?

The most frequently reported incident mechanism in South Dakota is Hacking / IT incident, present in 5 of 13 canonical breach events. Phishing / social engineering follows with 3.

Are independent practices in South Dakota at higher risk?

Independent healthcare practices are the fastest-growing target for healthcare cyberattacks nationwide — attacks on small providers have increased 6x since 2021. South Dakota practices face the same threat landscape with fewer resources to defend against it. Patient Protect provides breach prevention specifically for independent practices starting at $39/month.

What are South Dakota's breach notification requirements?

South Dakota's state-specific breach notification requirements are undergoing primary-source re-verification. Federal HIPAA's 60-day individual-notice deadline applies to covered entities in every state and is unaffected by that re-verification.

Explore the full breach intelligence dashboard — the landscape by mechanism and jurisdiction, the organizations appearing in the record, and every underlying source record.

Open full dashboard

Data Disclaimer: This page counts canonical breach events reconciled from the HHS OCR Breach Portal and state attorney general breach notifications under Patient Protect Canonical Data Model 1.1. Regulatory enforcement actions, security advisories, community reports and algorithmically modeled records are held separately and are not counted here. Data is provided “as-is” for informational purposes only. Inclusion of any entity does not imply wrongdoing. Users must independently verify information before relying on it. See Terms of Use.

South Dakota healthcare breach data

Events at organizations located in South Dakota

Events with South Dakota notice activity

365K

Reported affected, event totals

Hacking / IT incident

Most common mechanism

Recent events

Latest breach events reported in South Dakota

Jun 6, 2025·25,398 reported affected·Hacking / IT incident·1 source record
Huron Regional Medical Center, Inc.
Reported to HHS OCR.
Mar 31, 2025·106,763 reported affected·Hacking / IT incident·1 source record
Black Hills Regional Eye Institute
Reported to HHS OCR.
Date not reported·60,000 reported affected·Phishing / social engineering·1 source record
Avera Health
Avera Health notified patients of a data breach resulting from a phishing campaign affecting employee emails.
Date not reported·15,000 reported affected·Unknown mechanism·1 source record
Mount Rushmore Diagnostics
A data entry error by Mount Rushmore Diagnostics led to incorrect patient lab results being sent to unauthorized individuals.
Date not reported·3,000 reported affected·Misconfiguration·2 source records·Limited evidence
Mount Rushmore Healthcare
Unintentional upload of patient demographic files to a public-facing server.
Date not reported·10,000 reported affected·Unknown mechanism·1 source record
Mount Rushmore Medical Devices
Firmware vulnerability exploited to access device usage logs containing limited patient identifiers.
Date not reported·85,000 reported affected·Phishing / social engineering·1 source record
Prairie Lakes Healthcare System
Prairie Lakes Healthcare System reported a data breach resulting from a phishing attack that compromised employee email accounts. The attack led to unauthorized access to patient data, including clinical and demographic information.
Date not reported·18,000 reported affected·Hacking / IT incident·1 source record
Rushmore Medical Devices
Rushmore Medical Devices experienced a data breach where a database containing customer and limited clinical trial participant information was inadvertently exposed online.
Date not reported·4,000 reported affected·Phishing / social engineering·1 source record
Sioux Falls Pharmacy
Phishing attack led to compromise of employee email accounts, exposing prescription data.
Date not reported·10,000 reported affected·Misconfiguration·1 source record
South Dakota Behavioral Health
Unauthorized access to an unsecured cloud storage bucket containing patient therapy notes.
Date not reported·1,000 reported affected·Unknown mechanism·1 source record
South Dakota Community Hospital
Human error in mailing led to patient statements being sent to incorrect addresses.
Date not reported·1,800 reported affected·Hacking / IT incident·1 source record
South Dakota Community Pharmacy
Unauthorized access to pharmacy management system due to weak passwords.

Most affected entities

Organizations in South Dakota by breach events

Black Hills Regional Eye Institute

event

106.8K

reported affected

Prairie Lakes Healthcare System

event

85K

reported affected

Avera Health

event

60K

reported affected

Huron Regional Medical Center, Inc.

event

25.4K

reported affected

South Dakota Health Partners

event

25K

reported affected

Incident mechanisms

How breaches happen in South Dakota

How the 13 canonical breach events with a South Dakotasource record were caused, as stated by the reporting source. An event is counted once regardless of how many times it was filed.

Hacking / IT incident5 (38%)
Phishing / social engineering3 (23%)
Unknown mechanism3 (23%)
Misconfiguration2 (15%)

South Dakota compliance requirements

South Dakota breach notification law

Beyond federal HIPAA requirements, South Dakota has its own breach notification law that may impose additional obligations on healthcare practices operating in the state.

S.D. Codified Laws § 22-40-19 et seq.

Primary-source re-verification pending

Protect your South Dakota practice

13 breach events in South Dakota. Is your practice next?

Patient Protect gives independent practices real-time compliance monitoring, breach prevention, and secure workflows — so your practice stays out of this database. Starting at $39/month.

Start free trial Get your Patient Protect Score — free

14-day free trial · No charge until trial ends

FAQ

Healthcare breaches in South Dakota

How many healthcare data breaches have been reported in South Dakota?

What is the most common breach mechanism in South Dakota?

The most frequently reported incident mechanism in South Dakota is Hacking / IT incident, present in 5 of 13 canonical breach events. Phishing / social engineering follows with 3.

Are independent practices in South Dakota at higher risk?

What are South Dakota's breach notification requirements?

Explore the full breach intelligence dashboard — the landscape by mechanism and jurisdiction, the organizations appearing in the record, and every underlying source record.

Open full dashboard

South Dakota healthcare breach data

Latest breach events reported in South Dakota

Huron Regional Medical Center, Inc.

Black Hills Regional Eye Institute

Avera Health

Mount Rushmore Diagnostics

Mount Rushmore Healthcare

Mount Rushmore Medical Devices

Prairie Lakes Healthcare System

Rushmore Medical Devices

Sioux Falls Pharmacy

South Dakota Behavioral Health

South Dakota Community Hospital

South Dakota Community Pharmacy

Organizations in South Dakota by breach events

Black Hills Regional Eye Institute

Prairie Lakes Healthcare System

Avera Health

Huron Regional Medical Center, Inc.

South Dakota Health Partners

How breaches happen in South Dakota

South Dakota breach notification law

13 breach events in South Dakota. Is your practice next?

Healthcare breaches in South Dakota

How many healthcare data breaches have been reported in South Dakota?

What is the most common breach mechanism in South Dakota?

Are independent practices in South Dakota at higher risk?

What are South Dakota's breach notification requirements?

South Dakota healthcare breach data

Latest breach events reported in South Dakota

Huron Regional Medical Center, Inc.

Black Hills Regional Eye Institute

Avera Health

Mount Rushmore Diagnostics

Mount Rushmore Healthcare

Mount Rushmore Medical Devices

Prairie Lakes Healthcare System

Rushmore Medical Devices

Sioux Falls Pharmacy

South Dakota Behavioral Health

South Dakota Community Hospital

South Dakota Community Pharmacy

Organizations in South Dakota by breach events

Black Hills Regional Eye Institute

Prairie Lakes Healthcare System

Avera Health

Huron Regional Medical Center, Inc.

South Dakota Health Partners

How breaches happen in South Dakota

South Dakota breach notification law

13 breach events in South Dakota. Is your practice next?

Healthcare breaches in South Dakota

How many healthcare data breaches have been reported in South Dakota?

What is the most common breach mechanism in South Dakota?

Are independent practices in South Dakota at higher risk?

What are South Dakota's breach notification requirements?

Latest verified Responses

CareCloud breach filing: what a revised scope means for vendor oversight

Madera Community Hospital breach filing: 150,000 individuals and exfiltration-scoped risk analysis

Brown Health Medical Group breach filing: 311,760 individuals and server-side safeguards