Blakehurst
Disclosed Dec 6, 20223 years ago2,141 affectedConfirmed
The covered entity (CE), Blakehurst, reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 1,047 individuals. The PHI involved included names, Social Security numbers, addresses, drivers’ license numbers, dates of birth, diagnoses, and claims and financial information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were trained on email security.
What is known
| People affected | 2,141 (as reported by the organization) |
|---|---|
| Disclosed | Dec 6, 2022 |
| Happened | May 31, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Blakehurstin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Blakehurst (Healthcare Provider, MD)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Dec 6, 2022 | 2 |
| HHS archivetotal | Dec 6, 2022 | 1,047 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Blakehurst, reported that multiple employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 1,047 individuals. The PHI involved included names, Social Securi · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.