Edwards County Medical Center data breach
Edwards County Medical Center in Indiana reported a data breach in August 2026, affecting patient records from December 2025. This incident exposed sensitive personal and medical data, including names, dates of birth, Social Security Numbers, and detailed health information. Affected individuals face potential risks of identity theft and medical fraud.
Docket sheet
- Company
- Edwards County Medical Center
- Venue
- Indiana Attorney General
- Filed
- August 26, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 2, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 26, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
Edwards County Medical Center, a healthcare provider in Indiana, formally reported a data breach to state authorities on August 26, 2026. This incident, which occurred on December 2, 2025, is currently under monitoring for further developments. The nature of the breach was unspecified, but it led to the exposure of highly sensitive patient data.
The information compromised in this security event includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of foundational identifiers like names, dates of birth, and Social Security Numbers can facilitate institutional identity theft and synthetic fraud. Moreover, the leakage of clinical details such as medical record numbers and treatment histories presents risks for targeted medical fraud and significant privacy violations.
As a healthcare entity, Edwards County Medical Center is bound by stringent federal and state regulations, including HIPAA, to protect patient health information. The occurrence of this data breach raises questions about the effectiveness of the safeguards in place to meet these legal duties. Such incidents can indicate potential lapses in network security, data encryption, or vendor oversight.
If you received an official notification letter from Edwards County Medical Center, it indicates that your personal and medical information was involved in this security lapse. This notification establishes the grounds to explore potential legal recourse. Victims of healthcare data breaches do not necessarily need to show financial loss to seek legal review; the heightened risk of future identity theft and privacy infringement can be sufficient. We offer a free, confidential case review to discuss your options and determine if you may qualify for legal action.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.