Advanced Rehabilitation Technology disclosed a data security incident to the Indiana Attorney General on April 16, 2026, triggering legally mandated notification letters. If you are one of the people who received Advanced Rehabilitation Technology's letter, your data may have been exposed and you could be entitled to compensation.
The Indiana Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Indiana Attorney General filing, the Advanced Rehabilitation Technology incident compromised these categories of personal information:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
Advanced Rehabilitation Technology operates within the specialized healthcare sector, providing comprehensive physical therapy, occupational rehabilitation, and advanced mobility restoration services to patients across Indiana. Because of the clinical nature of their operations, the company routinely collects and maintains a vast repository of highly sensitive information. This includes detailed patient medical histories, clinical intake forms, functional capacity evaluations, physical therapy notes, billing details, and private insurance information. To deliver coordinated care and process medical claims, Advanced Rehabilitation Technology must also retain foundational personal identifiers such as Social Security numbers, dates of birth, full names, and primary home addresses for every patient under their care.
In 2026, Advanced Rehabilitation Technology officially reported a significant security incident to the Indiana Attorney General's office, alerting regulatory authorities and the public that unauthorized actors had compromised their network environment. While specific technical forensics continue to emerge, data breaches affecting specialized healthcare providers typically involve sophisticated ransomware deployments, unauthorized entry into electronic health record (EHR) databases, or vulnerabilities introduced through third-party medical billing and scheduling vendors. These cyberattacks often bypass perimeter security controls, granting malicious actors unrestricted access to internal file servers where sensitive patient files and administrative databases are stored.
The exposure of medical and personal data resulting from this incident poses severe, long-term risks to every affected individual. When clinical treatment data, medical record numbers, and health insurance details are compromised alongside Social Security numbers and dates of birth, victims face an elevated threat of targeted medical identity theft. Criminals can fraudulently bill insurance providers under a victim's name, acquire prescription drugs illegally, or leverage clinical data to execute highly convincing, personalized phishing scams. Furthermore, because Social Security numbers and banking details cannot be easily changed, victims remain at perpetual risk of unauthorized financial account openings, tax fraud, and comprehensive identity takeover.
As a healthcare entity handling protected health information, Advanced Rehabilitation Technology was bound by stringent legal and regulatory frameworks, most notably the Health Insurance Portability and Accountability Act (HIPAA), the Health Information Technology for Economic and Clinical Health (HITECH) Act, and Indiana state data protection statutes. These laws mandate the implementation of rigorous administrative, physical, and technical safeguards, including multi-factor authentication, robust network encryption, regular vulnerability assessments, and proactive intrusion detection. The occurrence of a data breach of this magnitude strongly suggests a failure in upholding these mandatory security standards, leaving patient data vulnerable to foreseeable cyber threats.
Receiving a data breach notification letter from Advanced Rehabilitation Technology serves as formal legal acknowledgment that your confidential records were compromised due to corporate negligence. Under modern class action jurisprudence, the receipt of this letter establishes legal standing to pursue financial compensation and mandatory security reforms, without requiring proof that identity theft has already occurred. Our firm is currently investigating potential class action claims against Advanced Rehabilitation Technology on behalf of affected Indiana residents. We handle all data breach lawsuits on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation for you.
Notification Delay: Approximately 2 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Advanced Rehabilitation Technology
You were a customer, patient, employee, or client of Advanced Rehabilitation Technology
Your personal information was stored in Advanced Rehabilitation Technology's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Keep the Advanced Rehabilitation Technology letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Check your Advanced Rehabilitation Technology letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Deadlines apply to breach claims. A free review of your Advanced Rehabilitation Technology letter takes minutes, and we only get paid if you do.
Security Incident
2026-02-17
An unauthorized party accessed Advanced Rehabilitation Technology systems that stored personal information.
Reported to Attorney General
April 16, 2026
The Indiana AG received Advanced Rehabilitation Technology's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Several forms of recovery may be available to Advanced Rehabilitation Technology letter recipients — the exact mix depends on state law and the data types exposed:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Indiana's data breach law (IC 24-4.9) requires companies to notify affected residents and the Attorney General. Indiana residents may pursue damages under the Deceptive Consumer Sales Act for a company's failure to protect personal information.
The companies below also filed breach notices with the Indiana Attorney General. Letter recipients for any of them can pursue a review.
Zaxis Financial Services Americas LLC
Indiana · Sep 2026
Woodlawn Hospital
Indiana · Sep 2026
Wooddesign RV Interiors LLC
Indiana · Sep 2026
Woodard, Emhardt, Henry, Reeves, & Wagner LLC
Indiana · Aug 2026
Wired Communications
Indiana · Jun 2026
33156
Indiana · Mar 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris