Professional Healthcare Management
Disclosed Oct 28, 20214 years ago17,710 affectedConfirmed
The covered entity (CE), Professional Healthcare Management, Inc., reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 12,306 individuals. This PHI involved included names, dates of birth, addresses, Social Security numbers, diagnoses, and other treatment information. The CE notified HHS, affected individuals, and the media. In its mitigation efforts, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards.
What is known
| People affected | 17,710 (as reported by the organization) |
|---|---|
| Disclosed | Oct 28, 2021 |
| Happened | Sep 9, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Professional Healthcare Managementin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Professional Healthcare Management (Healthcare Provider, TN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Oct 28, 2021 | 12,306 |
| Indiana AGresidents of IN | Oct 29, 2021 | 12 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · disclosed: 2021-10-29 to 2021-10-28 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Professional Healthcare Management, Inc., reported that it was the victim of a ransomware attack that compromised the protected health information (PHI) of 12,306 individuals. This PHI involved included names, dates · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.