Free consultation · No obligation786-306-7278
DataBreachClassActions.com
MonitoringIndiana AG filing · September 23, 2026

Park Place Behavioral Healthcare Data Breach Exposes Patient Data

Osceola Mental Health, operating as Park Place Behavioral Healthcare in Indiana, reported a data breach on September 23, 2026. This incident exposed highly sensitive personal and medical information, raising significant privacy concerns for affected patients.

This breach is real, not a scam. Osceola Mental Health dba Park Place Behavioral Healthcare officially reported it to the Indiana Attorney General on September 23, 2026.

Reviewed by David S. Harris, Esq., data breach and class action attorney (Florida Bar No. 0112739). Free consultation: 786-306-7278

Received a Osceola Mental Health dba Park Place Behavioral Healthcare notification letter? Find out in minutes if you qualify for compensation.

Free case review
State
Indiana
Breach date
July 5, 2026
Reported
September 23, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates
  • Home Address
  • Phone Number

Park Place Behavioral Healthcare, a mental health and behavioral support provider in Indiana, confirmed a data breach incident on September 23, 2026. The breach, which occurred on July 5, 2026, involved an unspecified security event that compromised the privacy of patient records.

The exposed data categories are extensive and highly personal. They include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, Home Address, and Phone Number. This combination of identifying and clinical details puts affected individuals at considerable risk.

The exposure of medical and behavioral health records, especially alongside Social Security Numbers, can lead to serious consequences. Unlike a credit card that can be replaced, this sensitive information is permanent and can be used for medical identity theft, insurance fraud, targeted scams, and other forms of personal exploitation, causing lasting distress.

As a healthcare entity, Park Place Behavioral Healthcare is obligated by federal and state regulations, including HIPAA, to protect patient data. A breach involving such sensitive information suggests potential deficiencies in the security measures designed to safeguard confidential records from unauthorized access or cyber threats.

If you received a data breach notification letter from Park Place Behavioral Healthcare, it confirms your information was compromised. You may have legal options to seek accountability and potential compensation for the risks and harms you now face. Contact us for a free, confidential case review to understand your rights, with no out-of-pocket costs unless we successfully recover compensation.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases