Every public data breach

47 disclosed this week · 26,367 on record

Recovery Project

Disclosed Jun 28, 20211,103 affectedConfirmed

Official notice

The covered entity (CE), The Recovery Project, LLC, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 1,103 individuals. The ePHI involved included names, Social Security numbers, dates of birth and drivers’ licenses numbers. The CE notified HHS, affected individuals, the media, and provided credit monitoring services to affected individuals. In response to the breach, the CE strengthened its technical safeguards and retrained its staff on email security.

What is known

People affected1,103 (as reported by the organization)
DisclosedJun 28, 2021
HappenedFeb 23, 2021
AttackHacking
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
sector2026-09-25
other to healthby backfillSource
attack2026-09-25
unknown to hackingby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to The covered entity (CE), The Recovery Project, LLC, reported that an employee was the victim of an email phishing attack that affected the electronic protected health information (ePHI) of 1,103 individuals. The ePHI involved included namesby backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Recovery Project