Did IU Health have a data breach?
Answer
Yes. IU Health reported a data breach to the Indiana Attorney General on August 10, 2026.
View the official filingWhat the filing says
- Reported to
- Indiana Attorney General
- Filing date
- August 10, 2026
- Breach date
- June 15, 2026
- People affected
- Not stated in the filing
Information involved
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
In plain terms
IU Health, an Indiana healthcare provider, officially reported a data breach on August 10, 2026, following an incident on June 15, 2026. The compromise exposed sensitive patient data, including Full Name, Social Security Number, and detailed medical records, posing risks of identity theft and medical fraud for affected individuals.
IU Health, a healthcare provider based in Indiana, officially reported a data breach to regulators on August 10, 2026. The incident, which occurred on June 15, 2026, involved an unauthorized compromise of its network systems and is currently under monitoring during investigation.
Public filings indicate that the breach exposed a range of highly sensitive personal and medical data. The affected categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.
The exposure of these data types creates significant risks for affected individuals. Compromised identifiers like Full Name, Date of Birth, and Social Security Number can be exploited for identity theft or fraudulent financial activities. The release of Medical Record Numbers and other health information could lead to medical identity theft, where unauthorized parties receive treatment or billing under a victim's name, or misuse private health conditions.
Individuals who receive notification about this breach should monitor their credit reports and Explanation of Benefits statements closely for suspicious activity. It is advisable to place a fraud alert or freeze on credit files as a preventative measure. Reviewing all medical billing statements for accuracy can also help detect potential medical identity fraud. Staying vigilant for unexpected communications regarding medical or financial accounts is important.
If you received a notification letter about this breach, you can compare it with other Indiana data breach filings or browse all cases.
Commonly recommended next steps
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Look up another company
Other breaches reported in Indiana
- Bozeman School DistrictYes — reportedIndiana
- Teamsters Local 17Yes — reportedIndiana
- BankYes — reportedIndiana
- PeoplesBankYes — reportedIndiana · October 8, 2026
- World Acceptance CorporationYes — reportedIndiana · September 30, 2026
- McKenzie Creative BrandsYes — reportedIndiana · September 30, 2026
- MEBS Global ReachYes — reportedIndiana · September 30, 2026
- Midvale Indemnity and American Family Connect Insurance CompanyYes — reportedIndiana · September 30, 2026
- American Motorcyclist AssociationYes — reportedIndiana · September 30, 2026
- Nishiyamato AcademyYes — reportedIndiana · September 30, 2026
DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with IU Health.