IU Health data breach
IU Health in Indiana reported a data breach in August 2026, revealing exposure of sensitive patient information including Full Name and Social Security Number. This incident places affected individuals at risk for identity theft and medical fraud due to the compromise of core identifying and health data.
Docket sheet
- Company
- IU Health
- Venue
- Indiana Attorney General
- Filed
- August 10, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJune 15, 2026
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 10, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
IU Health, a prominent healthcare provider in Indiana, formally reported a data security incident on August 10, 2026. This breach involved an unauthorized compromise of its network systems, impacting patient data managed by the organization. The investigation into the full extent and nature of this security event is ongoing, with an initial breach date noted as June 15, 2026.
The information reported as exposed includes individuals' Full Name, Date of Birth, and Social Security Number. Also compromised were Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such extensive personal and medical details creates significant and lasting risks for those affected, including identity theft, fraudulent medical claims, and privacy concerns.
Healthcare providers like IU Health are entrusted with safeguarding highly confidential patient data under federal and state regulations, including HIPAA. Receiving a breach notification letter from IU Health indicates that your private information was compromised due to alleged failures in their security protocols. This notification serves as a formal acknowledgment of the incident and establishes grounds for legal inquiry.
If you received a data breach notification from IU Health, you may be entitled to legal recourse. Our firm is currently reviewing this incident to determine potential legal claims. There is no requirement to demonstrate direct financial loss to initiate a claim; the exposure of your sensitive data may be sufficient. We invite affected individuals to request a free case review to understand their options. This is attorney advertising and does not create an attorney-client relationship.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.