Sunrise Company data breach

Clerk's notes

On July 28, 2026, Sunrise Company, an integrated behavioral health and elder-care services provider based in Indiana, reported a data breach to regulators. This incident stemmed from a cybersecurity event that occurred on April 23, 2026, compromising its internal network infrastructure. The company is currently monitoring the situation after discovering unauthorized access to sensitive data.

The compromised data includes several categories of highly sensitive personal information. According to the company's report, exposed data types consist of Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. The exposure of such detailed personal and health data can lead to serious long-term risks for those affected.

The exposure of personal identifiers like Full Name, Date of Birth, and Social Security Number places individuals at an increased risk of identity theft and financial fraud. With Medical Record Number, Health Insurance ID Number, and Diagnosis and Treatment Information also compromised, affected individuals face potential medical identity theft, where bad actors could fraudulently obtain medical services or prescriptions. This incident potentially creates lasting vulnerabilities for affected individuals.

Under federal laws like the Health Insurance Portability and Accountability Act (HIPAA) and Indiana's Disclosure of Security Breach Law, organizations like Sunrise Company are legally mandated to protect sensitive personal and health information. These regulations require comprehensive security safeguards to prevent unauthorized access and data exfiltration. The occurrence of this breach raises questions about whether these security obligations were adequately met.

If you received a data breach notification letter from Sunrise Company, it indicates that your sensitive personal information was compromised. Such a letter provides a basis for understanding your legal rights and considering participation in actions aimed at holding companies accountable for security lapses. Our firm is currently investigating this matter and offers a no-cost, no-obligation review of your potential claim.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.