The Devereux Foundation data breach
The Devereux Foundation reported a data breach to the Indiana Attorney General on July 23, 2026, stemming from an incident on November 6, 2025. This exposure included sensitive personal and health information, creating long-term risks for individuals whose records were compromised.
Docket sheet
- Company
- The Devereux Foundation
- Venue
- Indiana Attorney General
- Filed
- July 23, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredNovember 6, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralJuly 23, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Clinical and Psychological Evaluation Records
- Contact and Mailing Address
Clerk's notes
On July 23, 2026, The Devereux Foundation formally reported a data security incident to the Indiana Attorney General. This report concerns an event that occurred on November 6, 2025. The incident is currently under monitoring as part of an ongoing investigation.
The compromised data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Clinical and Psychological Evaluation Records, and Contact and Mailing Address. As a provider of behavioral healthcare and special education services, The Devereux Foundation routinely handles this deeply sensitive information for its clients and patients.
The exposure of such detailed personal and health records carries significant risks for affected individuals. The combination of core identifiers like Social Security Numbers with clinical data increases vulnerability to identity theft, various forms of fraud, and even medical fraud. Victims may face long-term monitoring for suspicious activity across their financial and personal accounts.
Organizations entrusted with sensitive personal and protected health information are legally obligated to implement robust security measures. The occurrence of a data breach suggests that these safeguards may have been insufficient, leaving vulnerable data susceptible to unauthorized access. These duties are critical for protecting the privacy and security of individuals under their care.
Receiving a data breach notification letter means your personal information was compromised. This letter establishes your eligibility to seek legal recourse. You do not need to prove immediate financial loss; the increased risk of future harm and the invasion of privacy are often sufficient grounds. Our firm is investigating this data breach and offers free, no-obligation case reviews for affected individuals.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.