DataBreachCaseSearch.com

Grafton City Hospital Inc data breach

Grafton City Hospital in Indiana reported a data breach in August 2026, stemming from an incident in May 2026, which compromised various types of patient data. This exposure creates long-term risks, including potential medical identity theft, for individuals whose information was accessed without authorization.

Docket sheet

Company
Grafton City Hospital Inc
Venue
Indiana Attorney General
Filed
August 21, 2026
People affected
Not stated
Status
Monitoring
Official regulator filing

Where this breach stands

  1. 1

    Breach occurredMay 6, 2026

    Date of the incident as stated in the filing.

  2. 2

    Reported to the Indiana Attorney GeneralAugust 21, 2026

    The company filed a breach notification with the state regulator.

  3. 3

    Attorney reviewCurrent stage

    Current status: Monitoring. Our office is reviewing whether affected people may have claims.

  4. 4

    Your case review

    Got a letter about this breach? Submit it for a free, confidential review.

Information listed in the filing

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Prescription Information
  • Provider and Treatment Dates
  • Home Address

Clerk's notes

Grafton City Hospital Inc, a healthcare provider in Indiana, formally reported a data security incident on August 21, 2026. This breach, which occurred on May 6, 2026, involved unauthorized access to the hospital's network environment, impacting patient data. The incident is currently under monitoring, indicating an ongoing review of its scope and consequences.

The compromised information includes sensitive patient details such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Home Address. The exposure of such detailed personal health and identifying data presents significant risks to affected individuals.

Unlike other forms of data compromise, the exposure of medical and personal identifiers can lead to severe and prolonged issues. Patients may face risks of medical identity theft, where their records could be altered, or fraudulent medical claims might be filed in their names. This can disrupt healthcare services and create lasting complications beyond typical financial fraud.

For those who have received an official notification letter from Grafton City Hospital Inc, this document confirms that your private information was involved in the security incident. Such a notification is a crucial step in understanding your position and considering potential actions.

If you have received a data breach notification from Grafton City Hospital Inc, it is important to understand your rights and options. Learning more about this incident can help you determine the appropriate next steps to protect your personal and medical information. You may be eligible for a free case review.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.

Other Indiana docket entries

Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.