Three Oaks Hospice Data Breach Exposes Patient Records
Three Oaks Hospice, operating in Indiana, reported a significant data breach in 2026 affecting patient records. The breach may have compromised sensitive information including Full Name, Date of Birth, Social Security Number, and various health details. Individuals who received a notification letter should understand their potential risks and legal options.
This breach is real, not a scam. Three Oaks Hospice Inc officially reported it to the Indiana Attorney General on September 17, 2026.
Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278
Received a Three Oaks Hospice Inc notification letter? Find out in minutes if you qualify for compensation.
Free case review- State
- Indiana
- Breach date
- July 16, 2025
- Reported
- September 17, 2026
What may have been exposed
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Home Address
- Phone Number
Three Oaks Hospice Inc., which provides end-of-life care, palliative support, and medical management services, formally reported a data security incident to the Indiana Attorney General on September 17, 2026. This breach, stemming from an incident on July 16, 2025, has raised concerns for patients and their families, as the nature of hospice care involves handling highly confidential personal and health information.
The reported exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. Such information is often stored in extensive databases by healthcare providers, making it a target for malicious actors looking to exploit vulnerabilities in system safeguards.
When deeply personal data like medical records and Social Security Numbers are compromised, victims face severe and long-lasting risks. Unlike financial card details that can be easily replaced, this type of immutable information can be used for comprehensive identity theft, fraudulent medical billing, or other forms of fraud. The breach is particularly distressing for those already dealing with vulnerable situations due to health or loss.
As a healthcare entity, Three Oaks Hospice Inc. is bound by strict federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA). These laws require robust administrative, physical, and technical safeguards to protect sensitive patient data. A widespread data breach suggests potential failures in upholding these critical security duties.
If you received an official data breach notification letter from Three Oaks Hospice Inc., it confirms that your confidential records were affected by this security incident. This notification establishes a basis for pursuing legal recourse, as it acknowledges the compromise of your private information. Our firm is currently monitoring this situation and investigating potential class action claims on behalf of affected individuals.
We understand that dealing with a data breach can be unsettling. If your data was exposed in the Three Oaks Hospice breach, you may be entitled to seek compensation for the risks and distress caused. We offer a free case review to help you understand your legal options with no out-of-pocket costs unless we successfully recover compensation for you.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners
- World Acceptance Corporation