Skip to content

Haven Behavioral Healthcare

Disclosed Mar 23, 20215 years ago21,714 affectedConfirmed

Official notice

Haven Behavioral Healthcare, a business associate (BA), reported that it experienced a hacking incident that affected the protected health information (PHI) of 21,714 individuals. The PHI involved included names, addresses, dates of birth, Social Security numbers, claims and financial information, and diagnoses. The BA notified HHS, affected individuals, the media, and provided substitute notice. Following the breach incident, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI. OCR provided technical assistance regarding the HIPAA Breach Notification Rule.

What is known

People affected21,714 (as reported by the organization)
DisclosedMar 23, 2021
HappenedSep 24, 2020
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Indiana AGresidents of INMar 23, 202123
HHS archivetotalMar 23, 202121,714
History of this record
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · summary: empty to Haven Behavioral Healthcare, a business associate (BA), reported that it experienced a hacking incident that affected the protected health information (PHI) of 21,714 individuals. The PHI involved included names, addresses, dates of birth, · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Haven Behavioral Healthcare

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.