Grant Co Public Hospital District #2 dba Quincy Valley Med Ctr data breach
Grant Co Public Hospital District #2, operating as Quincy Valley Medical Center in Indiana, reported a data breach impacting patient information from late 2025. This incident, formally filed on August 5, 2026, exposed various sensitive personal and medical data categories. The investigation into the security event is currently in a monitoring status, prompting affected individuals to consider their legal options.
Docket sheet
- Company
- Grant Co Public Hospital District #2 dba Quincy Valley Med Ctr
- Venue
- Indiana Attorney General
- Filed
- August 5, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 2, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 5, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
- Billing and Financial Information
Clerk's notes
Grant Co Public Hospital District #2, known as Quincy Valley Medical Center, a healthcare provider based in Indiana, has formally reported a data security incident. This breach, which occurred in December 2025, was officially filed with regulators on August 5, 2026. The incident potentially compromised sensitive patient records maintained by the medical center.
The exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information. Such comprehensive exposure of personal health data carries substantial and lasting risks for those affected.
Unlike compromised credit card numbers that can be replaced, medical information, once exposed, cannot be altered. This makes victims vulnerable to medical identity theft, fraudulent claims, and targeted scams that exploit private health details. The long-term implications for privacy and financial security can be significant.
Quincy Valley Medical Center, as a healthcare institution, is obligated to protect patient data under various privacy laws. The occurrence of a data breach suggests that the safeguards intended to secure this information may have been insufficient. The regulatory investigation into this matter remains in a monitoring phase.
If you have received a data breach notification letter from Quincy Valley Medical Center, it serves as official confirmation that your sensitive information was impacted. This notification is important for understanding your rights and exploring potential legal recourse. Our firm is currently evaluating the details of this breach.
We offer a complimentary case review for individuals affected by this data incident. This review helps determine if your specific circumstances warrant legal action. There are no upfront costs for this consultation, and any legal representation would be on a contingency basis, meaning you only pay if we secure a recovery.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.