Delphi Drug & Alcohol Council
Disclosed Apr 27, 20233 years ago6,288 affectedConfirmed
Delphi Drug & Alcohol Council, the covered entity (CE), reported that several employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 6,288 individuals. The PHI involved included names, addresses, dates of birth, and drivers’ license and Social Security numbers. The CE notified HHS, affected individuals, the media, and provided substitute notice on its website. In its mitigation efforts the CE implemented additional administrative, technical, and security safeguards to better protect its sensitive data.
What is known
| People affected | 6,288 (as reported by the organization) |
|---|---|
| Disclosed | Apr 27, 2023 |
| Happened | Feb 28, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Nonprofit · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Delphi Drug & Alcohol Councilin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Delphi Drug & Alcohol Council (Healthcare Provider, NY)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Apr 27, 2023 | 6,288 |
| Indiana AGresidents of IN | Jun 5, 2023 | 2 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2023-06-05 to 2023-04-27 · backfill source
- 2026-09-25 · summary: empty to Delphi Drug & Alcohol Council, the covered entity (CE), reported that several employees were the subjects of an email phishing scheme that compromised the protected health information (PHI) of 6,288 individuals. The PHI involved included na · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.