Talbert House
Disclosed Sep 10, 20215 years ago304,000 affectedConfirmed
The covered entity (CE), Talbert House, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 304,000 individuals. The PHI involved included names, Social Security numbers, addresses, drivers’ license numbers, dates of birth, financial and claims information, diagnoses, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect its PHI.
What is known
| People affected | 304,000 (as reported to HHS) |
|---|---|
| Disclosed | Sep 10, 2021 |
| Happened | Jun 10, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2021 data breach report: Talbert Housein.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Talbert House (Healthcare Provider, OH)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Sep 10, 2021 | 214 |
| HHS archivetotal | Sep 10, 2021 | 304,000 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 48842 to 304000 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Talbert House, reported that it experienced a cyber-attack that compromised the protected health information (PHI) of 304,000 individuals. The PHI involved included names, Social Security numbers, addresses, drivers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.