Mercy Iowa City

Mercy Iowa City, also known as Mercy Clinic, is a healthcare provider headquartered in Iowa City, United States. The organization delivers medical services to patients in the local community, offering care that includes clinical evaluation, treatment, and health management. As a healthcare provider, it maintains patient records that contain personal and health‑related information. Its operations involve interaction with insurance carriers and the handling of sensitive data such as Social Security numbers and driver’s license numbers. The organization’s core mission centers on providing accessible healthcare to the residents it serves.

Mercy Iowa City’s scale can be inferred from the impact of its reported cybersecurity incidents. In May 2020, a compromised employee email account exposed data on over 92,000 individuals, prompting the organization to notify those affected and offer credit monitoring and identity theft protection. Earlier, in January 2016, a malware infection led to the compromise of information for approximately 15,000 patients, including demographic details, clinical records, insurance data, and some Social Security numbers. Both incidents were investigated without evidence of data misuse, yet they highlighted the volume of protected health information the organization manages. The breaches resulted in the establishment of dedicated call centers for patient inquiries and prompted enhancements to technical safeguards. These events underscore Mercy Iowa City’s role as a custodian of sensitive patient data subject to federal privacy regulations such as HIPAA. Consequently, the organization has continued to focus on securing its information systems while maintaining its healthcare service delivery.