DataBreachCaseSearch.com

LHC Group, Inc. data breach

LHC Group, a national in-home healthcare provider, has reported a data breach to the Washington Attorney General, indicating unauthorized access to sensitive patient information. This incident could leave affected individuals vulnerable to medical identity theft and other privacy risks, prompting a review of their legal options.

Docket sheet

Company
LHC Group, Inc.
Venue
Washington Attorney General
Filed
September 4, 2026
People affected
Not stated
Status
Monitoring
Official regulator filing

Where this breach stands

  1. 1

    Breach occurred

    The filing does not state when the incident happened.

  2. 2

    Reported to the Washington Attorney GeneralSeptember 4, 2026

    The company filed a breach notification with the state regulator.

  3. 3

    Attorney reviewCurrent stage

    Current status: Monitoring. Our office is reviewing whether affected people may have claims.

  4. 4

    Your case review

    Got a letter about this breach? Submit it for a free, confidential review.

Information listed in the filing

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Home Address
  • Phone Number

Clerk's notes

LHC Group, Inc., a prominent provider of in-home healthcare services across the nation, recently filed notice of a data breach with the Washington Attorney General's office on September 4, 2026. This filing indicates that unauthorized activity may have compromised the security of sensitive personal and health information maintained by the company.

While specific technical details remain under review, the breach involved the exposure of several critical data categories. These included individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. Such information is highly sought after by malicious actors due to its value on illicit markets.

The exposure of these deeply personal data types presents significant and lasting risks to affected individuals. Unlike financial account numbers, which can be changed, compromised demographic and medical details are immutable. This makes victims susceptible to potential medical identity theft, fraudulent healthcare claims, and targeted phishing attempts that can lead to long-term financial and privacy complications.

As a healthcare organization, LHC Group, Inc. is bound by stringent federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA), to protect patient data. The occurrence of this breach suggests that there may have been vulnerabilities in the company's data security protocols or failures in upholding the required administrative, physical, and technical safeguards intended to prevent unauthorized access.

If you have received a data breach notification letter from LHC Group, Inc., it serves as formal confirmation that your personal and protected health information was compromised. Receiving such a letter provides you with legal standing to understand your rights and potential recourse. You may wish to consider a free legal consultation to discuss how this breach might affect you and explore available options.

If a notification letter about this breach reached you, see every Washington data breach on file or browse all cases.

Other Washington docket entries

Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.