PalmFlex Inc data breach

Clerk's notes

PalmFlex Inc, a company specializing in wellness, physical rehabilitation, and ergonomic solutions, formally reported a data security incident to the Indiana Attorney General on July 22, 2026. This incident, which occurred on April 2, 2026, signifies a potential compromise of private data handled by the company in its operations across the Midwest.

According to the report, the exposed information includes individuals' Full Name, Date of Birth, Social Security Number, Mailing Address, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, and Financial Account Number. These data types represent a significant aggregation of sensitive personal and health records.

The exposure of such detailed information creates substantial long-term risks for those affected. Compromised Social Security Numbers and Dates of Birth can facilitate severe identity theft, leading to fraudulent credit lines or unauthorized loans. Furthermore, when health insurance details and clinical treatment records are involved, victims face the unique threat of medical identity theft, where personal health information could be misused, potentially impacting their medical history and treatment.

As an entity entrusted with protected health information and sensitive consumer data, PalmFlex Inc was legally bound by federal and state regulations, including the Health Insurance Portability and Accountability Act (HIPAA) and Indiana's data breach notification laws. These frameworks require robust security measures to prevent unauthorized data access. The occurrence of this data breach suggests that these required security standards may not have been sufficiently maintained, leaving confidential files vulnerable.

For Indiana residents who have received an official data breach notification letter from PalmFlex Inc, this correspondence confirms that your private information was involved in the security incident. Receiving such a notice establishes your standing to seek a review of your situation. You are not required to demonstrate immediate financial loss or out-of-pocket expenses to explore your options. Our firm conducts investigations into these matters without any upfront legal fees or out-of-pocket costs, recovering compensation only if we succeed on your behalf.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.