Childrens Hope Alliance
Disclosed Sep 26, 20197 years ago10,744 affectedConfirmed
The covered entity (CE), Children’s Hope Alliance, reported that it was a victim of a phishing attack that affected the electronic protected health information (ePHI) of 4,564 individuals. The ePHI involved included names, addresses, dates of birth, drivers’ license numbers, Social Security numbers, clinical information, and financial information. The CE notified HHS, affected individuals, and the media. In response to the breach, the CE sanctioned the responsible employee and implemented additional administrative and technical safeguards to better protect its ePHI. OCR provided the CE with technical assistance regarding the Breach Notification Rule.
What is known
| People affected | 10,744 (as reported by the organization) |
|---|---|
| Disclosed | Sep 26, 2019 |
| Discovered | May 15, 2019 |
| Happened | Apr 23, 2019 |
| Attack | Hacking |
| Data exposed | Names, Social Security numbers, Government IDs, Payment cards, Financial, Health |
| Sector | Nonprofit · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2019 data breach report: Childrens Hope Alliancein.gov · Official notice | Official notice |
| Maine Attorney General breach notice archive: Children's Hope Alliancemaine.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Children's Hope Alliance (Healthcare Provider, NC)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Sep 26, 2019 | 1 |
| Maine AGresidents of ME | Sep 26, 2019 | 3 |
| HHS archivetotal | Dec 3, 2019 | 4,564 |
| HHS archivetotal | Dec 6, 2019 | 1,002 |
| HHS archivetotal | Jan 14, 2020 | 4,564 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: ["names","ssn","government-id","payment-card","financial"] to ["names","ssn","government-id","payment-card","financial","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Children’s Hope Alliance, reported that it was a victim of a phishing attack that affected the electronic protected health information (ePHI) of 4,564 individuals. The ePHI involved included names, addresses, dates · backfill source
- 2026-09-25 · sector: other to nonprofit · backfill source
- 2026-09-25 · data_types: [] to ["names","ssn","government-id","payment-card","financial"] · backfill source
- 2026-09-25 · discovered: empty to 2019-05-15 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.