Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringIndiana AG filing · September 17, 2026

Three Oaks Hospice Data Breach Exposes Patient Records

Three Oaks Hospice, operating in Indiana, reported a significant data breach in 2026 affecting patient records. The breach may have compromised sensitive information including Full Name, Date of Birth, Social Security Number, and various health details. Individuals who received a notification letter should understand their potential risks and legal options.

This breach is real, not a scam. Three Oaks Hospice Inc officially reported it to the Indiana Attorney General on September 17, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Three Oaks Hospice Inc notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Indiana
Breach date
July 16, 2025
Reported
September 17, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Home Address
  • Phone Number

Three Oaks Hospice Inc., which provides end-of-life care, palliative support, and medical management services, formally reported a data security incident to the Indiana Attorney General on September 17, 2026. This breach, stemming from an incident on July 16, 2025, has raised concerns for patients and their families, as the nature of hospice care involves handling highly confidential personal and health information.

The reported exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. Such information is often stored in extensive databases by healthcare providers, making it a target for malicious actors looking to exploit vulnerabilities in system safeguards.

When deeply personal data like medical records and Social Security Numbers are compromised, victims face severe and long-lasting risks. Unlike financial card details that can be easily replaced, this type of immutable information can be used for comprehensive identity theft, fraudulent medical billing, or other forms of fraud. The breach is particularly distressing for those already dealing with vulnerable situations due to health or loss.

As a healthcare entity, Three Oaks Hospice Inc. is bound by strict federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA). These laws require robust administrative, physical, and technical safeguards to protect sensitive patient data. A widespread data breach suggests potential failures in upholding these critical security duties.

If you received an official data breach notification letter from Three Oaks Hospice Inc., it confirms that your confidential records were affected by this security incident. This notification establishes a basis for pursuing legal recourse, as it acknowledges the compromise of your private information. Our firm is currently monitoring this situation and investigating potential class action claims on behalf of affected individuals.

We understand that dealing with a data breach can be unsettling. If your data was exposed in the Three Oaks Hospice breach, you may be entitled to seek compensation for the risks and distress caused. We offer a free case review to help you understand your legal options with no out-of-pocket costs unless we successfully recover compensation for you.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases