DataBreachCaseSearch.com

The Devereux Foundation data breach

The Devereux Foundation reported a data breach to the Indiana Attorney General on July 23, 2026, stemming from an incident on November 6, 2025. This exposure included sensitive personal and health information, creating long-term risks for individuals whose records were compromised.

Docket sheet

Company
The Devereux Foundation
Venue
Indiana Attorney General
Filed
July 23, 2026
People affected
Not stated
Status
Monitoring
Official regulator filing

Where this breach stands

  1. 1

    Breach occurredNovember 6, 2025

    Date of the incident as stated in the filing.

  2. 2

    Reported to the Indiana Attorney GeneralJuly 23, 2026

    The company filed a breach notification with the state regulator.

  3. 3

    Attorney reviewCurrent stage

    Current status: Monitoring. Our office is reviewing whether affected people may have claims.

  4. 4

    Your case review

    Got a letter about this breach? Submit it for a free, confidential review.

Information listed in the filing

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Clinical and Psychological Evaluation Records
  • Contact and Mailing Address

Clerk's notes

On July 23, 2026, The Devereux Foundation formally reported a data security incident to the Indiana Attorney General. This report concerns an event that occurred on November 6, 2025. The incident is currently under monitoring as part of an ongoing investigation.

The compromised data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Clinical and Psychological Evaluation Records, and Contact and Mailing Address. As a provider of behavioral healthcare and special education services, The Devereux Foundation routinely handles this deeply sensitive information for its clients and patients.

The exposure of such detailed personal and health records carries significant risks for affected individuals. The combination of core identifiers like Social Security Numbers with clinical data increases vulnerability to identity theft, various forms of fraud, and even medical fraud. Victims may face long-term monitoring for suspicious activity across their financial and personal accounts.

Organizations entrusted with sensitive personal and protected health information are legally obligated to implement robust security measures. The occurrence of a data breach suggests that these safeguards may have been insufficient, leaving vulnerable data susceptible to unauthorized access. These duties are critical for protecting the privacy and security of individuals under their care.

Receiving a data breach notification letter means your personal information was compromised. This letter establishes your eligibility to seek legal recourse. You do not need to prove immediate financial loss; the increased risk of future harm and the invasion of privacy are often sufficient grounds. Our firm is investigating this data breach and offers free, no-obligation case reviews for affected individuals.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.

Other Indiana docket entries

Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.