My Doctor LLC data breach
My Doctor LLC, a medical practice in Indiana, officially reported a data security incident in August 2026, stemming from unauthorized network access in December 2025. This breach potentially compromised a range of sensitive patient information, leading to risks such as medical identity theft and financial fraud for those affected.
Docket sheet
- Company
- My Doctor LLC
- Venue
- Indiana Attorney General
- Filed
- August 7, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredDecember 18, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralAugust 7, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
- Billing and Payment Information
Clerk's notes
My Doctor LLC, an Indiana-based private medical practice, formally disclosed a data breach to the Indiana Attorney General on August 7, 2026. The incident, which occurred on December 18, 2025, involved unauthorized access to the company's digital network environment.
The compromised information is reported to include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Payment Information. This extensive exposure of personal and health data raises significant privacy concerns for affected individuals.
Exposure of such sensitive health and personal identifiers can lead to severe long-term consequences. Victims face risks of medical identity theft, where stolen credentials are used for unauthorized medical services or fraudulent billing. The inclusion of foundational personal identifiers like Full Name, Date of Birth, and Social Security Number also heightens the potential for financial identity theft, including fraudulent credit applications or tax filings.
As a healthcare provider handling protected health information, My Doctor LLC is subject to strict federal and state regulations, including HIPAA and HITECH. These laws mandate robust security measures to safeguard patient data. The occurrence of this breach suggests that these critical protocols may not have been sufficiently implemented or maintained.
If you received a data breach notification letter from My Doctor LLC, it signifies that your confidential records were part of this compromise. This notification establishes your standing to seek further information regarding the incident. Our firm is currently monitoring this case to assess the legal avenues available to affected individuals. There is typically no requirement to prove actual financial or medical harm to qualify for a review.
Learning about a data breach can be unsettling. Understanding your rights and potential next steps is important. Individuals affected by the My Doctor LLC data breach may be eligible for legal recourse. We invite you to request a free case review to explore your options.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.