Thomas Allen
Disclosed Mar 23, 20224 years ago2,803 affectedConfirmed
The covered entity (CE), Thomas Allen, reported that several employees were the targets of an email phishing scheme affecting the protected health information (PHI) of 2,803 individuals. The PHI involved included names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers and drivers’ license or state identification numbers, and health insurance and treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional administrative and technical safeguards to better protect its PHI and received technical assistance from OCR regarding the HIPAA Rules.
What is known
| People affected | 2,803 (as reported to HHS) |
|---|---|
| Disclosed | Mar 23, 2022 |
| Happened | Jun 7, 2021 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2022 data breach report: Thomas Allenin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Thomas Allen (Healthcare Provider, MN)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Mar 23, 2022 | 1 |
| HHS archivetotal | Mar 23, 2022 | 2,803 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 2738 to 2803 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Thomas Allen, reported that several employees were the targets of an email phishing scheme affecting the protected health information (PHI) of 2,803 individuals. The PHI involved included names, addresses, phone num · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.