Westchester Ellenville Hospital dba Ellenville Regional Hospital data breach
Ellenville Regional Hospital, operating in Indiana, formally reported a data security incident on September 16, 2026. This breach exposed a range of sensitive patient information, including medical and financial details. Individuals affected by this event should understand the implications for their personal data and consider their legal options.
Docket sheet
- Company
- Westchester Ellenville Hospital dba Ellenville Regional Hospital
- Venue
- Indiana Attorney General
- Filed
- September 16, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 18, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralSeptember 16, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Billing and Financial Account Details
Clerk's notes
Ellenville Regional Hospital, operating as Westchester Ellenville Hospital, reported a data security incident to authorities in Indiana on September 16, 2026. The breach event itself occurred around December 18, 2025, and the matter is currently under monitoring. This incident directly impacts individuals who had entrusted the hospital with their confidential health and personal information.
The compromised data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Billing and Financial Account Details. The exposure of such a comprehensive set of personal and medical identifiers can lead to significant risks, including medical identity theft, fraudulent billing, and broader financial fraud.
As a healthcare provider, Ellenville Regional Hospital is subject to stringent federal and state regulations designed to protect patient data, including the Health Insurance Portability and Accountability Act (HIPAA). These regulations mandate robust security measures to prevent unauthorized access or disclosure of sensitive information. The occurrence of this breach suggests a potential lapse in these critical data protection protocols.
Patients who receive an official data breach notification letter from Ellenville Regional Hospital in Indiana have confirmed legal standing related to this incident. This notification indicates that their personal and health data were compromised as a result of the hospital's security event. Understanding the full scope of your legal rights and potential remedies is important.
If you have received such a notification, it is advisable to seek clarification on your situation. An attorney can review your case and explain the legal avenues available to you without any out-of-pocket cost.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.