Oak Hill Discloses 2025 Data Breach Impacting Sensitive Personal and Health Information
Oak Hill, a Connecticut-based nonprofit serving individuals with intellectual, developmental, physical, and visual disabilities, reported a data breach stemming from a security incident on October 6, 2025. The organization, which provides residential care, education, employment training, and assistive technology services statewide, launched an investigation upon discovering the unauthorized access.
By May 13, 2026, Oak Hill confirmed that the breach exposed sensitive data, including personally identifiable information (PII) and protected health information (PHI). Compromised files contained full names, dates of birth, Social Security numbers, driver’s license or state ID numbers, medical records, and health insurance details.
Notification letters were mailed to affected individuals on June 30, 2026, with Oak Hill also posting a public notice on its website. Those whose Social Security numbers may have been exposed were offered complimentary credit monitoring services. A dedicated toll-free response line (1-877-418-8555) was established for inquiries, operating Monday through Friday from 8 a.m. to 5 p.m. ET.
The breach highlights the vulnerability of sensitive data within healthcare and social service organizations, particularly for populations reliant on specialized care.
Source: https://www.claimdepot.com/data-breach/oak-hill-2026
Oak Hill (Legal name: CT Institute for the Blind) cybersecurity rating report: https://www.rankiteo.com/company/ct-institute-for-the-blind-dba-oak-hill-
"id": "CT-1784572305",
"linkid": "ct-institute-for-the-blind-dba-oak-hill-",
"type": "Breach",
"date": "10/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare/Social Services',
'location': 'Connecticut, USA',
'name': 'Oak Hill',
'type': 'Nonprofit'}],
'customer_advisories': 'Complimentary credit monitoring services offered to '
'affected individuals, dedicated toll-free response '
'line (1-877-418-8555) established for inquiries.',
'data_breach': {'personally_identifiable_information': ['Full names',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s license or '
'state ID numbers',
'Medical records',
'Health insurance '
'details'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2025-10-06',
'date_publicly_disclosed': '2026-06-30',
'description': 'Oak Hill, a Connecticut-based nonprofit serving individuals '
'with intellectual, developmental, physical, and visual '
'disabilities, reported a data breach stemming from a security '
'incident on October 6, 2025. The breach exposed sensitive '
'data, including personally identifiable information (PII) and '
'protected health information (PHI).',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'investigation_status': 'Completed',
'lessons_learned': 'The breach highlights the vulnerability of sensitive data '
'within healthcare and social service organizations, '
'particularly for populations reliant on specialized care.',
'references': [{'date_accessed': '2026-06-30',
'source': 'Oak Hill Public Notice'}],
'response': {'communication_strategy': 'Public notice on website, '
'notification letters mailed to '
'affected individuals, dedicated '
'toll-free response line'},
'title': 'Oak Hill Data Breach Impacting Sensitive Personal and Health '
'Information',
'type': 'Data Breach'}