Three Oaks Hospice of Dallas data breach
Three Oaks Hospice of Dallas reported a data breach in 2026, revealing exposure of sensitive patient and personal information from an incident in 2025. This breach could put affected individuals at risk of identity theft and medical fraud due to the compromise of data like Full Name, Social Security Number, and Diagnosis and Treatment Information.
Docket sheet
- Company
- Three Oaks Hospice of Dallas
- Venue
- Texas Attorney General
- Filed
- September 17, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJuly 16, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Texas Attorney GeneralSeptember 17, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
Three Oaks Hospice of Dallas reported an unspecified data breach to the Texas Attorney General on September 17, 2026, stemming from an incident that occurred on July 16, 2025. This event compromised portions of its network infrastructure and digital security controls. The investigation status for this incident is currently designated as "monitoring."
The exposed information includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This highly sensitive patient and personal data was maintained by Three Oaks Hospice for its palliative care and administrative operations.
The compromise of this type of data carries significant risks for affected individuals. Exposure of medical records could lead to medical identity theft, where unauthorized parties might use patient information to fraudulently obtain medical services or prescriptions. Personal identifiers like Social Security Number and Date of Birth heighten the risk of financial fraud, tax identity theft, and unauthorized account openings.
As a healthcare provider, Three Oaks Hospice of Dallas is obligated by laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Texas Medical Records Privacy Act to protect patient data through robust security measures. The occurrence of this data breach suggests a potential failure in maintaining these mandatory safeguards, leading to the exposure of confidential records.
If you received an official data breach notification letter from Three Oaks Hospice of Dallas, your personal information has been confirmed as compromised. You do not need to prove financial harm to understand your potential options. We are currently reviewing potential class action claims on behalf of those impacted by this data security incident.
Learning more about your rights and potential remedies is a crucial next step. Consider requesting a free case review to determine if your specific circumstances warrant legal action. This service is provided without any upfront costs.
If a notification letter about this breach reached you, see every Texas data breach on file or browse all cases.
Other Texas docket entries
- Insight Credit UnionTexas AGNovember 6, 2026Monitoring
- Fisher59, LLCTexas AGNovember 6, 2026Monitoring
- Amplifon (USA), Inc.Texas AGNovember 6, 2026Monitoring
- Park Dental Partners, Inc.Texas AGNovember 6, 2026Monitoring
- UFP Technologies Inc.Texas AGNovember 6, 2026Monitoring
- HTH Companies, Inc.Texas AGNovember 6, 2026Monitoring
- RevSpring, Inc.Texas AGNovember 6, 2026Monitoring
- Gator Town Pediatrics, Family and Urgent Care PLLCTexas AGNovember 6, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.