Great Plains Manufacturing
Disclosed Dec 1, 20214 years ago9,535 affectedConfirmed
The covered entity (CE), Great Plains Manufacturing, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 4,110 individuals. The PHI involved included names, dates of birth, and Social Security numbers. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 9,535 (as reported by the organization) |
|---|---|
| Disclosed | Dec 1, 2021 |
| Happened | Sep 28, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Great Plains Manufacturingin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Great Plains Manufacturing (Health Plan, KS)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Dec 1, 2021 | 4,110 |
| Indiana AGresidents of IN | Apr 15, 2022 | 47 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2022-04-15 to 2021-12-01 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Great Plains Manufacturing, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 4,110 individuals. The PHI involved included names, dates of birth, and Social Security num · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.