Data Privacy Incident Statement
In June 2021, Talbert House, a Cincinnati based non-profit, became aware of suspicious activity on our network. Upon discovering the suspicious activity, we immediately investigated and found that our network had been illegally accessed by an unauthorized third-party.
Investigation into this incident determined that the unauthorized third-party may have accessed and acquired files containing information of clients, employees, and some other third-parties. Those files included some clients’ protected health information, such as first and last name, mailing address, medical information, and health insurance information. For employees and some other third-parties, Social Security Numbers, driver’s license numbers, and financial account information may have been accessed.
Talbert House has no indication that any of this information has been used inappropriately, and the company has not received any reports of identity theft associated with this incident. Out of an abundance of caution, Talbert House offered complimentary credit monitoring and identity theft protection services to individuals whose personal information may have been impacted.
In October 2021, a class action lawsuit was filed in the Court of Common Pleas, Hamilton, County, Ohio against Talbert House regarding the June 2021 data security. While Talbert House denies any wrongdoing related to this lawsuit, it agreed to settle the lawsuit in June 2022. The Court preliminarily approved the terms of that settlement at a hearing in August 2022, so impacted individuals may now be entitled to monetary and other relief. More information about the settlement is available at thdatasettlement.com or by calling (833) 512-2309.
Protecting the privacy of its clients, employees, and members of our community is important to Talbert House, and we regret any injury or inconvenience this incident may have caused. Talbert House has taken steps to enhance its system security and remains committed to reviewing its security protocols and enhancing employee cybersecurity training.
