Directions for Living
Disclosed Sep 15, 20215 years ago19,494 affectedConfirmed
The covered entity (CE), Directions for Living, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 19,494 individuals. The PHI involved included names, dates of birth, Social Security numbers, and clinical and health insurance information. The CE notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the CE implemented additional technical safeguards and revised its HIPAA policies and procedures.
What is known
| People affected | 19,494 (as reported by the organization) |
|---|---|
| Disclosed | Sep 15, 2021 |
| Happened | Jul 5, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Directions for Livingin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Directions for Living (Healthcare Provider, FL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Sep 15, 2021 | 4 |
| HHS archivetotal | Sep 15, 2021 | 19,494 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Directions for Living, reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 19,494 individuals. The PHI involved included names, dates of birth, Social Se · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.