Tri-Cities Gastroenterology data breach

Clerk's notes

Tri-Cities Gastroenterology, a specialized medical practice in Indiana, officially reported a data breach to regulators on April 29, 2026. The incident, which compromised patient information on or around December 11, 2025, involved unauthorized access to sensitive records maintained by the organization.

The compromised information includes critical personal and health identifiers. Specifically, the breach exposed individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This combination of data can have serious implications for those affected.

Exposure of such detailed medical and personal data carries substantial risks. Affected individuals may face increased vulnerability to medical identity theft, fraudulent health insurance claims, and various forms of targeted scams. The sensitive nature of health information also presents unique privacy violations and potential for emotional distress.

Under federal mandates like HIPAA and Indiana's own data breach notification laws, healthcare providers are entrusted with safeguarding protected health information. A breach of this magnitude suggests potential deficiencies in the administrative, physical, or technical safeguards that were in place to protect patient confidentiality and data integrity.

If you have received a formal data breach notification letter from Tri-Cities Gastroenterology, it confirms that your personal and health records were part of this incident. Receiving such notice establishes legal standing to explore your options. Our firm is currently reviewing this case, and we encourage affected individuals to seek a complimentary legal assessment to understand their rights and potential recourse.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.