Duneland School

Disclosed Dec 23, 20217,000 affectedConfirmed

The covered entity (CE), Duneland School Corporation, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 7,000 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, and employee benefits information. The CE notified HHS, affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards. Staff were retrained.

What is known

People affected	7,000 (as reported to HHS)
Disclosed	Dec 23, 2021
Happened	Oct 21, 2021
Attack	Hacking
Data exposed	NamesHealth
Sector	Education · US
Status	Confirmed

Sources

Official noticein.gov

Indiana Attorney General 2021 data breach report: Duneland School

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Duneland School (Health Plan, IN)

Notices filed

Residents of INDec 23, 2021

Indiana AG3,909 people

TotalDec 23, 2021

HHS archive7,000 people

History of this record

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

organization to hhsby backfillSource

records2026-09-25

4157 to 7000by backfillSource

summary2026-09-25

empty to The covered entity (CE), Duneland School Corporation, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 7,000 individuals. The PHI involved included names, addresses, dates of birth, Social Secuby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Duneland School