Physicians to Children & Adolescents Data Breach — Class Action Review

Physicians to Children & Adolescents is a specialized pediatric healthcare provider dedicated to the medical needs of infants, children, and teenagers. Because of their central role in juvenile medicine, the practice maintains deep and sensitive relationships with families across their service region, coordinating everything from routine pediatric care and developmental tracking to specialist referrals and immunization management. In the course of delivering these essential healthcare services, Physicians to Children & Adolescents necessarily collects and preserves vast repositories of highly confidential information, making them a primary custodian of sensitive records.

In 2025, Physicians to Children & Adolescents formally reported a significant data security incident to the Indiana Attorney General, alerting patients and regulatory bodies that unauthorized actors may have breached their digital infrastructure. While the exact vector of the compromise—whether via a sophisticated ransomware deployment, an exploited software vulnerability, or a third-party vendor compromise—continues to be evaluated, incidents of this nature in the healthcare sector typically exploit systemic network vulnerabilities to gain covert access to internal databases containing unencrypted patient files and administrative records.

The exposure resulting from this breach implicates highly sensitive categories of personal and medical information, each carrying severe downstream risks for affected patients and their families. Compromised data elements frequently include full legal names, dates of birth, Social Security numbers, health insurance policy details, medical record numbers, and clinical documentation such as diagnoses, treatment histories, and prescription records. When pediatric medical data and Social Security numbers are exposed, minors and their parents face prolonged risks of synthetic identity theft, fraudulent medical billing, and unauthorized utilization of insurance benefits that may go undetected for years as children mature into adulthood.

As a covered entity operating within the healthcare sector, Physicians to Children & Adolescents was bound by strict legal and regulatory mandates under the Health Insurance Portability and Accountability Act (HIPAA), as well as Indiana state consumer protection statutes, to implement rigorous administrative, physical, and technical safeguards. These legal frameworks require continuous network monitoring, robust encryption standards, and regular vulnerability assessments to secure electronic protected health information. The occurrence of a data breach of this magnitude strongly suggests a failure to adequately maintain these mandatory security protocols, raising serious questions regarding institutional negligence and compliance.

Receiving a data breach notification letter from Physicians to Children & Adolescents serves as formal legal acknowledgment that your or your child's confidential records were compromised as a direct result of inadequate data security measures. Under established legal principles, this notification provides affected individuals with the legal standing necessary to participate in a class action lawsuit aimed at holding the healthcare provider accountable. Our firm is actively investigating potential claims on a contingency fee basis, meaning affected families incur zero upfront costs or out-of-pocket expenses, and attorneys' fees are recovered only if a successful settlement or judgment is achieved.