Aultman Health Foundation
Disclosed Jun 24, 20215 years ago7,354 affectedConfirmed
The covered entity (CE), Aultman Health Foundation, reported that an employee impermissibly accessed the protected health information (PHI) of 7,354 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, lab results, medications, and health insurance information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring and identity theft protection services to affected individuals, sanctioned the responsible employee, and enhanced audit reporting capabilities.
What is known
| People affected | 7,354 (as reported by the organization) |
|---|---|
| Disclosed | Jun 24, 2021 |
| Happened | Sep 14, 2009 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Aultman Health Foundationin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Aultman Health Foundation (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jun 24, 2021 | 10 |
| HHS archivetotal | Jun 24, 2021 | 7,354 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Aultman Health Foundation, reported that an employee impermissibly accessed the protected health information (PHI) of 7,354 individuals. The PHI involved included names, addresses, dates of birth, Social Security nu · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.