HORIZON HOUSE, LTD.

Horizon House, Inc. notified Delaware AG of a data event occurring between March 2-5, 2021. Suspicious activity led to the potential viewing or taking of personal information (name, government IDs) by an unknown actor. The company notified federal law enforcement, offered credit monitoring via TransUnion, and is reviewing security policies.

Horizon House, Inc. (PA) reported to HHS OCR on 2021-09-17 a Hacking/IT Incident (ransomware attack) affecting 27,823 individuals. Breached information was located on a Network Server. Compromised PHI included names, dates of birth, driver's license numbers, addresses, Social Security numbers, claims and financial information, diagnoses, and other treatment information. The entity notified HHS, individuals, and media, and implemented additional administrative, technical, and security safeguards. OCR provided technical assistance on the HIPAA Security Rule.

Horizon House, Inc., a healthcare entity based in Philadelphia, PA, reported an external system breach (hacking) occurring between March 2 and March 5, 2021. The incident compromised the personal information (names and financial account or credit/debit card numbers) of 35,107 individuals, including one Maine resident. The breach was discovered on September 3, 2021, and written notifications were sent to affected individuals on September 17, 2021, offering 12 months of credit monitoring services.