Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringTexas AG filing · September 4, 2026

LHC Group Data Breach in Texas Exposes Sensitive Patient Records

LHC Group, a prominent healthcare provider, reported a data breach to the Texas Attorney General on September 4, 2026. This incident, occurring on April 7, 2026, compromised highly sensitive patient data including medical records and Social Security Numbers. Individuals who received a notification letter should understand their legal options regarding this exposure.

This breach is real, not a scam. LHC Group, Inc officially reported it to the Texas Attorney General on September 4, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a LHC Group, Inc notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Texas
Breach date
April 7, 2026
Reported
September 4, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates

LHC Group, a major provider of in-home health services, confirmed a data security incident affecting its network systems in Texas. The breach was reported on September 4, 2026, following an unauthorized compromise that took place on April 7, 2026. This incident means that patient data under the company's care was exposed to unauthorized parties.

The compromised information includes critical personal and health details that, when combined, create a significant risk for affected individuals. Specifically, the exposed data consists of Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. Such detailed information can be misused for identity theft, medical fraud, or other harmful purposes.

As a healthcare entity, LHC Group is bound by strict regulations, including the Health Insurance Portability and Accountability Act (HIPAA), designed to protect patient privacy and secure sensitive health information. A breach of this scale suggests potential deficiencies in the administrative, physical, and technical safeguards that the company was legally obligated to maintain.

If you have received an official data breach notification letter from LHC Group, it confirms that your confidential information was part of this security incident. The receipt of such a letter provides a basis for you to explore your legal rights and potential avenues for recourse, even if you have not yet experienced direct financial harm or identity theft.

Individuals affected by the LHC Group data breach may have grounds to seek accountability through legal action. Understanding what happened and what steps you can take is crucial. Our firm offers a free, no-obligation case review to discuss the specifics of this breach and help you understand your legal options.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Texas Attorney General filing

Related data breach cases