Krapf Group
Disclosed Jan 15, 20215 years ago15,795 affectedConfirmed
The covered entity (CE), Krapf Group, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 610 individuals. The CE notified HHS and the affected individuals. The PHI involved included names, dates of birth, addresses, Social Security numbers, and health insurance information. In response to the breach, the CE implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 15,795 (as reported by the organization) |
|---|---|
| Disclosed | Jan 15, 2021 |
| Discovered | Nov 23, 2020 |
| Happened | Nov 17, 2020 |
| Attack | Hacking |
| Data exposed | Names, Health, Insurance |
| Sector | Insurance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Notice letter filed with the Delaware DOJ: Krapf Groupattorneygeneral.delaware.gov · Official notice | Official notice |
| Indiana Attorney General 2021 data breach report: Krapf Groupin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Krapf Group (Health Plan, PA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Delaware DOJresidents of DE | Jan 15, 2021 | 1,570 |
| Indiana AGresidents of IN | Jan 15, 2021 | 7 |
| HHS archivetotal | Jan 19, 2021 | 610 |
History of this record
- 2026-09-25 · sector: other to insurance · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Krapf Group, reported that it was the victim of a ransomware attack affecting the protected health information (PHI) of 610 individuals. The CE notified HHS and the affected individuals. The PHI involved included na · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/Data-Breach-Year-to-date-Report-2021-1.pdf · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Delaware DOJ), confirmed by Delaware DOJ. Record counts are as reported. Not legal advice.