Skip to content

Specialized Alternatives for Families & Youth of America

Disclosed Sep 11, 20206 years ago58,123 affectedConfirmed

Official notice

The business associate (BA), Specialized Alternatives for Families & Youth of America, reported that multiple employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 58,123 individuals. The PHI involved included names, addresses, dates of birth, drivers’ license and Social Security numbers, claims and financial information, diagnoses, lab results, and medications. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the BA implemented additional administrative, technical, and security safeguards. The CE retrained its staff on email security precautions.

What is known

People affected58,123 (as reported to HHS)
DisclosedSep 11, 2020
HappenedFeb 25, 2020
AttackHacking
Data exposedNames, Health
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Indiana AGresidents of INSep 11, 2020537
HHS archivetotalSep 11, 202058,123
History of this record
  • 2026-09-25 · sector: other to health · backfill source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · data_types: [] to ["names","health"] · backfill source
  • 2026-09-25 · records_basis: organization to hhs · backfill source
  • 2026-09-25 · records: 13960 to 58123 · backfill source
  • 2026-09-25 · summary: empty to The business associate (BA), Specialized Alternatives for Families & Youth of America, reported that multiple employees were the subjects of an email phishing scheme that affected the protected health information (PHI) of 58,123 individuals · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.

Everything about Specialized Alternatives for Families & Youth of America

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.