Ohio Living Data Breach Compromises Medical Records and SSNs

Ohio Living, a not-for-profit senior living and aging-services organization headquartered in Westerville, Ohio, disclosed a data breach that occurred in April 2026.

The incident was disclosed to the U.S. Department of Health and Human Services on June 12, 2026, and the organization posted a notice of the data privacy event on its website.

On April 26, 2026, an unauthorized actor gained access to specific systems within Ohio Living's network and copied certain files. The access extended into the following day, when the organization identified unusual activity on its systems.

The company's investigation determined that the files the unauthorized actor accessed may contain a wide range of sensitive information potentially belonging to former and current employees, patients, residents and other individuals associated with the organization.

The types of personally identifiable information and protected health information potentially exposed include names, addresses, dates of birth, Social Security numbers, taxpayer identification numbers, financial account information and payment card information, medical history information, disability information, diagnostic information, treatment information, prescription information, physician information, medical record numbers, health insurance information, subscriber numbers and health insurance group and plan numbers.

Ohio Living's response to the breach

Given that the information potentially exposed includes Social Security numbers, financial account details, payment card data and extensive medical records, individuals connected to Ohio Living should consider taking proactive steps to protect themselves.

Ohio Living set up a dedicated assistance line for individuals with questions about the incident. The number is 844-507-8953, available Monday through Friday, 8 a.m. to 8 p.m. Eastern Time, excluding major U.S. holidays.