More than 57,000 residents of long-term care facilities operated by HCF Management Inc. (“HCF” or “HCF Management”) were notified that their data was stolen in a hacking incident, according to Hippajournal.com.

HCF Management, a company which manages long-term care facilities in Ohio and Pennsylvania, detected a cyberattack on October 3, 2024, and on November 19, 2024, “HCF Management confirmed that the hacker had exfiltrated files containing residents’ information.”

Data Compromised by the HCF Management Data Breach

According to Hippajournal.com, the personal data compromised as a result of the cyberattack may have included:

  • Names
  • Addresses
  • Phone numbers
  • Dates of birth
  • Social Security numbers
  • Medical treatment information
  • Health insurance details

HCF Management Long-Term Care Facilities Impacted by the Data Breach

A review of U.S. Department of Health and Human Services (“HHS”), Office for Civil Rights (“OCR”), breach report data reflects that 57,927 long-term care residents in 31 care facilities in Ohio and Pennsylvania have been affected, as follows:

Facility Name

State Industry Records Affected Incident Date
HCF of Washington Inc. (“Court House Manor”) OH Healthcare Provider 2,489 01/09/2025
HCF of Warren Inc. (“Warren Manor”) PA Healthcare Provider 2,709 01/09/2025
HCF of Wapakoneta Inc. (“Wapakoneta Manor”) OH Healthcare Provider 1,862 01/09/2025
HCF of Van Wert Inc. (“Van Wert Manor”) OH Healthcare Provider 1,604 01/09/2025
HCF of Sweden Valley Inc. (“Sweden Valley Manor”) PA Healthcare Provider 1,768 01/09/2025
HCF of Shawnee Inc. (“Shawnee Manor”) OH Healthcare Provider 4,395 01/09/2025
HCF of Roselawn Inc. (“Roselawn Manor”) OH Healthcare Provider 1,208 01/09/2025
HCF of Piqua Inc. (“Piqua Manor”) OH Healthcare Provider 2,969 01/09/2025
HCF of Perrysburg Inc. (“Manor at Perrysburg”) OH Healthcare Provider 2,704 01/09/2025
HCF of Hempfield Inc. (“Hempfield Manor”) PA Healthcare Provider 4,744 01/09/2025
HCF of Garbry Ridge (“Garbry Ridge”) OH Healthcare Provider 512 01/09/2025
HCF of Fox Run Inc. (“The Manor at Greendale”) OH Healthcare Provider 2,333 01/09/2025
HCF of Fostoria Inc. (“St. Catherine’s Manor”) OH Healthcare Provider 1,253 01/09/2025
HCF of Findlay Inc. (“Fox Run Manor”) OH Healthcare Provider 3,986 01/09/2025
HCF of Fairview Inc. (“Fairview Manor”) PA Healthcare Provider 2,935 01/09/2025
HCF of Edinboro Inc. (“Edinboro Manor”) PA Healthcare Provider 2,844 01/09/2025
HCF of Crestview Inc. (“Village at the Greene”) OH Healthcare Provider 1,944 01/09/2025
HCF of Court House Inc. (“St. Catherine’s Manor”) OH Healthcare Provider 3,012 01/09/2025
HCF of Corry Inc. (“Corry Manor”) PA Healthcare Provider 2,620 01/09/2025
HCF of Celina Inc. (“Celina Manor”) OH Healthcare Provider 2,321 01/09/2025
HCF of Briarwood Inc. (“Briarwood Village”) OH Healthcare Provider 2,650 01/09/2025
HCF of Bradford Inc. (“Bradford Manor”) PA Healthcare Provider 1,565 01/09/2025
HCF of Bowling Green, Inc. (“Bowling Green Manor”) OH Healthcare Provider 3,500 01/09/2025

DataBreaches.net reported that “. . . of the 25 locations/facilities HCF lists on its website, only two do not have listings on HHS’s public breach tool: Burton’s Ridge and The Ridge of Lancaster. Whether they each had less than 500 patients affected or reports just have not shown up yet is unknown to DataBreaches, but for the 23 facilities that submitted reports to HHS, a total of 57,927 patients were affected.”

HCF Management’s Heritage Health Care Data Breach – 12,162 Individuals Affected 

According to DataBreaches.net, “[i]n addition to the 23 specific locations, Heritage Health Care, which is HCF Management’s home healthcare service for in-home care in Pennsylvania and Ohio, reported that 12,162 patients were affected, bringing the total number of patients for the incident to 70,089.”

HHS, OCR, breach data also reflects Heritage Health Care was the victim of a hacking/IT incident which affected 12,162 individuals.

Did You Receive a Notice About the HCF Management or Heritage Health Care Data Breach? 

If you’ve received notice of either data breach and have questions—or if you’ve experienced fraud, identity theft, or other harm as a result—Kehoe Law Firm, P.C. is here to help you understand your rights and explore your legal options.

Send us a message for more information or if you would like a free, no-obligation legal evaluation, please contact:

Kehoe Law Firm’s class action legal services are provided on a contingency-fee basis, meaning you are not responsible for any fees or litigation expenses.

 

 

SEND US A MESSAGE

Contact Us

ADDRESS

Kehoe Law Firm, P.C.
2001 Market Street
Suite 2500
Philadelphia, PA 19103

PHONE

Tel: 215-792-6676

EMAIL

[email protected]