Central Ozarks Medical Center data breach
Central Ozarks Medical Center reported a data security incident to the Indiana Attorney General on January 9, 2026, stemming from an event on May 14, 2025. This breach potentially exposed highly sensitive personal and health information, creating risks of identity theft and various forms of fraud for affected patients.
Docket sheet
- Company
- Central Ozarks Medical Center
- Venue
- Indiana Attorney General
- Filed
- January 9, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMay 14, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralJanuary 9, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
On January 9, 2026, Central Ozarks Medical Center officially reported a data security incident to the Indiana Attorney General. The breach, which occurred on or about May 14, 2025, is currently under monitoring, indicating ongoing review of its scope and impact.
This incident potentially compromised a wide array of personal and protected health information. The specific data types reported as exposed include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such details places affected individuals at heightened risk for medical identity theft, where unauthorized parties might seek to obtain medical services or goods using another's identity. Furthermore, the combination of personal identifiers could facilitate broader financial fraud, unauthorized credit applications, or targeted phishing schemes.
As a healthcare provider, Central Ozarks Medical Center is entrusted with safeguarding sensitive patient data under regulations like the Health Insurance Portability and Accountability Act (HIPAA) and state-specific data protection statutes. These laws mandate rigorous security measures to protect electronic health information. A breach of this nature often suggests potential vulnerabilities in system defenses or access controls, which may have allowed unauthorized entry into networks where confidential records are stored.
Individuals who received an official data breach notification letter from Central Ozarks Medical Center are formally advised that their private information was part of this compromise. Receiving such notice establishes legal standing for affected persons to assess their options. A free, no-obligation case review can help clarify the potential implications of this exposure and any available legal avenues.
Understanding the specifics of your situation is the first step. Our team is currently reviewing the Central Ozarks Medical Center data breach to determine its full impact on affected individuals. We invite those who received a breach notification to request a free case review to discuss their circumstances.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.