Emory Healthcare data breach: what happened and what to do

An Emory Healthcare employee accessed the records of 1,891 patients without permission to commit unemployment benefits fraud. Names, dates of birth and Social Security numbers were involved. Emory reported it to HHS in December 2022.

View all 13,177 breaches

Breach date: Dec 2020
Made public: 6 Dec 2022
Affected: 1,891
Data exposed: Names, Dates of birth, Social security numbers
Last updated: 1 Nov 2026

Reviewed by Anthon Wansland

Head of Product & Co-Founder

Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.

This was an insider case, not an outside hack. Emory Healthcare, the Atlanta health system, told the U.S. Department of Health and Human Services (HHS) that one of its employees accessed the protected health information of 1,891 people without authorization.

What happened

The employee used the records to commit identity theft in an unemployment benefits fraud scheme. Press coverage of the case says the U.S. Department of Labor alerted Emory in 2022 and that the access ran from December 2020 to December 2021. Emory cooperated with the investigation by the Department of Labor and the Department of Justice. The employee later pleaded guilty to conspiracy to commit wire fraud.

Sources checked: ocrportal.hhs.gov, beckershospitalreview.com, techtarget.com

Last verified against the official page: 1 Nov 2026

How we research this Report an error

What was exposed

According to HHS's description of the case, the data included names, dates of birth and Social Security numbers. That combination is what fraudsters need to file a claim for benefits, open credit or apply for a loan in someone else's name. Medical details are not listed as part of this incident.

Emory's response

Emory notified HHS, the affected people and the media, and posted a notice on its website. It sanctioned the employee and offered complimentary identity protection and credit monitoring. If you received a letter, enroll in the monitoring it offers.

What it means for you

Because Social Security numbers were involved, the risks are fraudulent unemployment claims, new credit accounts and tax fraud. A credit freeze is the most direct protection, and you should look out for letters about benefits you never applied for.

What to do if you were in it

1

Freeze your credit at all three bureaus

A freeze stops new credit being opened in your name and costs nothing. Place it with Equifax, Experian and TransUnion; the FTC explains how at consumer.ftc.gov. Lift it temporarily when you apply for credit yourself.
2

Read the notice letter and use the protection it offers

If a letter arrived, it lists what was exposed and often includes free credit monitoring or identity restoration with an enrollment deadline. Sign up before that date passes.
3

Watch your statements and credit reports

Check bank and card statements for charges you don't recognize, and pull your free credit reports at AnnualCreditReport.com. If something is wrong, report it at IdentityTheft.gov and follow the recovery plan it gives you.
4

Look out for unemployment claims you didn't file

A letter from a state unemployment agency about benefits you never requested is a sign someone used your details. Report it to that agency and at IdentityTheft.gov.
5

Expect phishing that mentions the breach

Scammers use news of a breach to sound legitimate. Don't click links or call numbers in unexpected texts or emails about it. Contact the company through the phone number or site on your own card or statement.
6

Check whether your email or phone is in this and other breaches

Serus monitors breach databases and the dark web and alerts you when your details appear, with steps for each case. A free scan shows where you stand today.

Official filings

U.S. Department of Health and Human Services , filed 6 Dec 2022 : 1,891 people

Timeline

1 Dec 2020
The breach happened
6 Dec 2022
The company made it public
6 Dec 2022
Reported to U.S. Department of Health and Human Services

Frequently asked

Was I affected by this breach?

Check the notice letter you received. Organizations usually mail one to each person whose data was involved. If you have no letter and think your data was held, contact Emory Healthcare using the details on its own website.

Should I freeze my credit?

If your Social Security number or similar ID details were exposed, the FTC says a credit freeze is a free way to block new accounts being opened in your name. Place it with Equifax, Experian and TransUnion.

What should I do if I get a message about the breach?

Treat it with care. Criminals send fake breach alerts. Go to the company's own site or the number on your statements instead of using a link or number in the message.