Ohio Living is notifying individuals of an incident that may affect the privacy of certain personal information relating to former and current employees, patients, residents, and other individuals. We are issuing this notice to communicate what is known about the incident, our response, and steps impacted individuals can take, if deemed appropriate. 

What Happened? On or about March 4, 2026, we became aware of suspicious activity within our email platform. Upon learning of this activity, we immediately took steps to secure our email environment.  We then launched a comprehensive internal investigation and engaged the services of cybersecurity experts to confirm the full nature and scope of the activity. The investigation determined that between February 3, 2026, and March 4, 2026, an unauthorized actor accessed certain employee email accounts and may have viewed or acquired certain emails and/or attachments within email account.  We then undertook an extensive review of the files that may have been copied to determine if any sensitive information was present and to whom it relates, for purposes of providing notice.  

What Information Was Involved? The categories of information that may be affected will vary by individual, but could include name, address, date of birth, Social Security number, medical history information, which may include, disability information, diagnostic information, treatment information, prescription information, physician information, medical record number, and health insurance information, which may include, subscriber number, and health insurance group/plan number.

What We Are Doing. The security of information in our care is amongst our highest priorities. Upon becoming aware of this event, we promptly began an investigation to determine the nature and scope of the event, took steps to secure our network. We are reviewing existing security policies and implementing additional cybersecurity measures to further protect against similar incidents moving forward. We are also reporting the incident to regulatory authorities, where required.

What You Can Do. We encourage you to remain vigilant against incidents of identity theft and fraud by reviewing your account and free credit reports for suspicious activity and to detect errors. Suspicious activity should be promptly reported to relevant parties including an insurance company, healthcare provider, and/or financial institution. 

For More Information. If you have additional questions, please contact our dedicated assistance line at (XXX) XXX-XXXX, which is available Monday through Friday, X:00am – X:00pm, excluding major US holidays.[