Three Oaks Hospice Inc data breach
Three Oaks Hospice Inc. reported a data breach to the Indiana Attorney General on September 17, 2026, stemming from an incident on July 16, 2025. This compromise may have exposed sensitive patient information, raising concerns for individuals whose records were entrusted to the hospice provider.
Docket sheet
- Company
- Three Oaks Hospice Inc
- Venue
- Indiana Attorney General
- Filed
- September 17, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJuly 16, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralSeptember 17, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Home Address
- Phone Number
Clerk's notes
Three Oaks Hospice Inc., operating in Indiana, filed a report with the state's Attorney General on September 17, 2026, regarding a data security incident that occurred on July 16, 2025. This filing initiates a formal review process concerning the compromise of sensitive data maintained by the hospice provider. The investigation into this breach is currently under monitoring, indicating ongoing scrutiny of the circumstances.
The reported breach involved the exposure of various protected personal and health information categories. These include individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. This range of data is critical for patient identification and care management within a healthcare setting.
The exposure of such comprehensive data presents significant risks to affected individuals. Unlike easily replaceable financial data, information like Social Security Numbers and Medical Record Numbers is immutable, making it a target for various forms of identity theft, medical fraud, or other malicious activities. Patients and their families are particularly vulnerable when such private details are compromised, especially during sensitive times.
As a healthcare entity, Three Oaks Hospice Inc. is legally obligated to safeguard patient data under federal and state regulations, including HIPAA. The occurrence of a data breach suggests potential gaps in the administrative, physical, or technical safeguards intended to protect this information. These requirements are in place to prevent unauthorized access and disclosure of confidential patient records.
Individuals who have received a data breach notification letter from Three Oaks Hospice Inc. should understand that this formal communication confirms their records were part of the compromise. Receiving this letter may establish a basis for legal inquiry into the incident. It is advisable to review the specifics of the notification and understand the implications for your personal data.
If you have received a notification regarding the Three Oaks Hospice Inc. data breach, you may be entitled to seek a review of your situation. Our firm is currently assessing potential legal actions related to this incident. We offer a free, no-obligation consultation to help you understand your rights and potential next steps without any upfront costs.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.