Did 240 have a data breach?

In plain terms

Digital health solutions provider 240 reported a data breach in Indiana in February 2026. The incident exposed sensitive personal and health information, including Full Name, Date of Birth, and Social Security Number, putting affected individuals at risk of identity theft and medical fraud.

240, a company operating in the digital health and wellness sector, formally reported a data breach to the Indiana Attorney General on February 18, 2026. The company provides software solutions, telemedicine platforms, and patient management systems, and routinely handles a significant volume of protected health information and sensitive consumer records.

The breach, which occurred on June 17, 2025, involved an unspecified type of cybersecurity incident impacting 240's network infrastructure. The company confirmed that individuals residing in Indiana and potentially elsewhere were affected by the compromise of their personal data.

The types of data reported as exposed include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such sensitive personal and health records carries significant risks for those impacted.

Individuals who received a notification letter from 240 should review the document carefully for specific details about the incident. It is advisable to remain vigilant for signs of identity theft or fraud, monitor financial accounts and credit reports, and consider placing a fraud alert or security freeze on credit with the major credit bureaus.