Aloha Nursing Rehab Centre
Disclosed Feb 24, 20233 years ago20,576 affectedConfirmed
Aloha Nursing Rehab Centre, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 20,216 individuals. The PHI involved included names, Social Security and drivers’ license numbers, addresses, birthdates, financial and claims information, diagnoses, lab results, and medications. The CE notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional technical safeguards to better protect its sensitive data.
What is known
| People affected | 20,576 (as reported by the organization) |
|---|---|
| Disclosed | Feb 24, 2023 |
| Happened | Jul 6, 2022 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Aloha Nursing Rehab Centrein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Aloha Nursing Rehab Centre (Healthcare Provider, HI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 24, 2023 | 4 |
| HHS archivetotal | Feb 24, 2023 | 20,216 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Aloha Nursing Rehab Centre, the covered entity (CE), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of approximately 20,216 individuals. The PHI involved included names, Social Secur · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.