Grafton City Hospital Inc data breach
Grafton City Hospital in Indiana reported a data breach in August 2026, stemming from an incident in May 2026, which compromised various types of patient data. This exposure creates long-term risks, including potential medical identity theft, for individuals whose information was accessed without authorization.
Docket sheet
- Company
- Grafton City Hospital Inc
- Venue
- Indiana Attorney General
- Filed
- August 21, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMay 6, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 21, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
- Home Address
Clerk's notes
Grafton City Hospital Inc, a healthcare provider in Indiana, formally reported a data security incident on August 21, 2026. This breach, which occurred on May 6, 2026, involved unauthorized access to the hospital's network environment, impacting patient data. The incident is currently under monitoring, indicating an ongoing review of its scope and consequences.
The compromised information includes sensitive patient details such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Home Address. The exposure of such detailed personal health and identifying data presents significant risks to affected individuals.
Unlike other forms of data compromise, the exposure of medical and personal identifiers can lead to severe and prolonged issues. Patients may face risks of medical identity theft, where their records could be altered, or fraudulent medical claims might be filed in their names. This can disrupt healthcare services and create lasting complications beyond typical financial fraud.
For those who have received an official notification letter from Grafton City Hospital Inc, this document confirms that your private information was involved in the security incident. Such a notification is a crucial step in understanding your position and considering potential actions.
If you have received a data breach notification from Grafton City Hospital Inc, it is important to understand your rights and options. Learning more about this incident can help you determine the appropriate next steps to protect your personal and medical information. You may be eligible for a free case review.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.