649Shaffer, Geraldine v. InHome Selective Care LLC11 Data Breach — Class Action Review

InHome Selective Care LLC operates within the highly regulated home healthcare and personal care services sector, coordinating skilled nursing, daily living assistance, and specialized medical support for vulnerable populations. Because of the intimate, in-home nature of their operations, InHome Selective Care LLC routinely collects, processes, and stores an extensive volume of deeply sensitive information. This includes not only standard administrative and financial records for payment processing, but also comprehensive health histories, detailed medical care plans, direct physician orders, and private insurance details for the clients they serve, as well as exhaustive background checks, employment verifications, and personal identifiers for their caregiving and administrative staff.

In 2025, InHome Selective Care LLC reported a formal data security incident to the Indiana Attorney General, triggering mandatory state notification protocols and raising significant concerns regarding the organization's cybersecurity infrastructure. While the full mechanics of the intrusion continue to be evaluated, incidents affecting healthcare and in-home care providers typically involve unauthorized actors gaining access to internal administrative networks, compromising legacy database servers, or leveraging compromised credentials to infiltrate third-party vendor platforms. In many instances, these cyberattacks exploit vulnerabilities in digital systems that store confidential client intake forms, scheduling software, and centralized human resources repositories.

The exposure resulting from this security failure threatens individuals with severe, multi-faceted risks that extend far beyond simple administrative inconvenience. Compromised data elements frequently include full names, dates of birth, Social Security numbers, health insurance policy identifiers, and private medical treatment or diagnosis histories. When medical records and Social Security numbers are leaked in tandem, bad actors can utilize this information to perpetrate medical identity theft—such as fraudulently billing insurance providers, obtaining unauthorized prescriptions, or intercepting necessary medical care. Furthermore, exposure of financial and identity markers leaves affected patients and employees highly vulnerable to unauthorized credit card applications, tax refund fraud, and long-term financial account takeover.

Under federal and state privacy frameworks, including the Health Insurance Portability and Accountability Act (HIPAA) and applicable Indiana consumer protection statutes, InHome Selective Care LLC had a strict legal obligation to implement and maintain robust administrative, physical, and technical safeguards to protect sensitive electronic protected health information (ePHI) and personally identifiable information (PII). These mandates require regular risk assessments, encrypted data storage, multi-factor authentication, and proactive monitoring of network activity. The occurrence of a data breach of this magnitude serves as a strong indicator that the organization may have failed to uphold these mandatory standards, allowing unauthorized parties to bypass inadequate security controls.

Receiving an official data breach notification letter from InHome Selective Care LLC serves as formal acknowledgment that your private information was compromised due to corporate security negligence. Legally, this notification establishes your standing to participate in a class action lawsuit aimed at holding the company accountable for failing to safeguard your sensitive data. Under modern legal standards, affected individuals do not need to prove that they have already suffered actual financial loss or identity theft to seek legal redress; the increased risk of future harm and the loss of privacy are sufficient grounds for action. Our law firm is actively investigating this breach on a contingency fee basis, meaning you pay no out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.