Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringWashington AG filing · September 4, 2026

Washington Patients Affected by LHC Group Data Breach

LHC Group, a national in-home healthcare provider, reported a data breach to Washington authorities on September 4, 2026. This incident exposed highly sensitive personal and health information, including Social Security Numbers and medical records. Individuals who received a notification letter about this breach may have legal options to consider.

This breach is real, not a scam. LHC Group, Inc. officially reported it to the Washington Attorney General on September 4, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a LHC Group, Inc. notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Washington
Reported
September 4, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Home Address
  • Phone Number

LHC Group, a prominent national provider of in-home healthcare services, recently reported a data security incident to the Washington Attorney General on September 4, 2026. This breach involved the unauthorized access and potential exposure of sensitive personal and protected health information.

The types of data reportedly compromised include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. The exposure of such detailed information can lead to significant and long-lasting risks for affected individuals.

When information like Social Security Numbers and comprehensive medical histories are exposed, victims face an elevated risk of targeted medical identity theft, fraudulent insurance claims, and unauthorized access to healthcare services. Unlike a compromised credit card number, these personal and medical details are immutable, meaning they cannot be changed once exposed, potentially leaving individuals vulnerable to persistent threats for years to come.

As a custodian of protected health information, LHC Group is legally bound by stringent regulatory frameworks, including HIPAA and Washington state data privacy laws. These regulations mandate robust administrative, physical, and technical safeguards to prevent unauthorized data exfiltration. The occurrence of a breach strongly suggests potential failures in maintaining these critical security protocols.

If you received an official data breach notification letter from LHC Group, it indicates that your private records were compromised due to this incident. Receiving such a letter provides you with legal standing to participate in a class action lawsuit. Our law firm is currently monitoring this situation and investigating potential legal remedies on behalf of affected individuals.

We offer a free, no-obligation case review for those in Washington who received a notification letter. This allows you to understand your legal rights and explore your options without any out-of-pocket cost.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Washington Attorney General filing

Related data breach cases