
HCF Management Data Breach Investigation
The Ohio data breach lawyers at The Lyon Firm are investigating a data security incident reported at HCF Management Inc., a company operating out of Lima, Ohio. The breach has allegedly exposed personal details that could include Social Security numbers and medical information for several of HCF’s long-term care facilities.
Contact our legal if you or a loved one has been notified of any instance of data breach at HCF or any other health-related entity. It is important to understand the increased risks of medical identity theft and fraud following a data theft incident. Call to learn more about how to protect yourself and to discuss your legal options.
What Happened at HCF Management?
According to sources, on October 4, 2024, HCF detected unusual activity within its computer network. An initial investigation found that an unauthorized party accessed its network on September 17, 2024, and may have acquired documents from those systems. The Ohio company manages 31 long-term care facilities, including the following assisted living and long-term care locations in Ohio and Pennsylvania:
- Bowling Green Manor
- Briarwood Village
- Celina Manor
- Court House Manor
- Fox Run Manor
- Piqua Manor
- Roselawn Manor
- Shawnee Manor
- The Manor at Greendale
- Catherine’s Manor of Fostoria
- Catherine’s Manor of Washington Court House
- The Manor at Perrysburg
- Village At The Greene
- Wapakoneta Manor
- Bradford Manor
- Corry Manor
- Edinboro Manor
- Fairview Manor
- Hempfield Manor
- Sweden Valley Manor
- Warren Manor
- Burton’s Ridge
- Garbry Ridge
- Roselawn Manor
- The Ridge at Lancaster
- Van Wert Manor
On January 9, HCF Management Inc. filed a notice of data breach with the Attorney General of Vermont, and began sending out notification letters to all individuals potentially impacted by the incident. HCF Management is a healthcare organization specializing in the operation of skilled nursing, rehabilitation, and assisted living facilities. HCF says the incident could have resulted in an unauthorized party being able to access consumers’ sensitive information, including names, addresses, phone numbers, dates of birth, Social Security numbers, medical information, and health insurance information.