Youth and Shelter Services
Disclosed Nov 3, 20232 years ago13,603 affectedConfirmed
The covered entity (CE), Youth and Shelter Services, reported that it was the victim of a malware attack that affected the protected health information (PHI) of 13,603 individuals. The PHI involved included names, dates of birth, Social Security and drivers’ license numbers, financial information, medications, and other treatment information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE implemented additional technical safeguards.
What is known
| People affected | 13,603 (as reported to HHS) |
|---|---|
| Disclosed | Nov 3, 2023 |
| Happened | Sep 3, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2024 data breach report: Youth and Shelter Servicesin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Youth and Shelter Services (Healthcare Provider, IA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Nov 3, 2023 | 13,603 |
| Indiana AGresidents of IN | Oct 29, 2024 | 7 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 3301 to 13603 · backfill source
- 2026-09-25 · disclosed: 2024-10-29 to 2023-11-03 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Youth and Shelter Services, reported that it was the victim of a malware attack that affected the protected health information (PHI) of 13,603 individuals. The PHI involved included names, dates of birth, Social Sec · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.