Greater Cincinnati Behavioral Health Services
Disclosed Jan 25, 20242 years ago62,036 affectedConfirmed
Greater Cincinnati Behavioral Health Services, the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 60,796 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, diagnoses, conditions, lab results, medications, and other treatment information. The CE notified the affected individuals, the media, and HHS. In response to the breach, the CE implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 62,036 (as reported by the organization) |
|---|---|
| Disclosed | Jan 25, 2024 |
| Happened | Dec 9, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2024 data breach report: Greater Cincinnati Behavioral Health Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Greater Cincinnati Behavioral Health Services (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Jan 25, 2024 | 435 |
| HHS archivetotal | Feb 2, 2024 | 50,000 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Greater Cincinnati Behavioral Health Services, the covered entity (CE), reported that it experienced a hacking attack that compromised the protected health information (PHI) of 60,796 individuals. The PHI involved included names, addresses, · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.
Everything about Greater Cincinnati Behavioral Health Services