Graham County Hospital data breach

Clerk's notes

Graham County Hospital, located in Indiana, formally reported a data security incident on September 14, 2026. This incident, which occurred on or about December 18, 2025, involved unauthorized access to the hospital's network infrastructure, potentially compromising sensitive patient information.

The reported data exposure includes a range of highly personal identifiers and protected health information. Specifically, the compromised records contain individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The nature of this data means it carries significant, lasting risks for those affected.

Unlike financial account numbers, medical and identity information of this kind cannot be easily changed or replaced. Its exposure increases the risk of medical identity theft, where fraudulent claims could be made in a victim's name, or other forms of targeted fraud. Individuals who receive notification about this breach should be particularly vigilant against suspicious communications or activity.

As a healthcare provider, Graham County Hospital is obligated by federal and state regulations, including HIPAA, to safeguard patient data. The occurrence of such a breach suggests that required security measures may not have been sufficient to prevent unauthorized access to highly confidential records.

If you have received an official data breach notification letter from Graham County Hospital, your confidential information was confirmed as compromised. This notification establishes a basis for legal review. Understanding your rights and potential next steps is crucial given the sensitive nature of the exposed data.

We are currently evaluating this data breach. If you were notified by Graham County Hospital, you may be entitled to a free, no-obligation case review to understand your options.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.