Did PalmFlex Inc have a data breach?

Answer

Yes. PalmFlex Inc reported a data breach to the Indiana Attorney General on July 22, 2026.

What the filing says

Reported to: Indiana Attorney General
Filing date: July 22, 2026
Breach date: April 2, 2026
People affected: Not stated in the filing

Information involved

Full Name
Date of Birth
Social Security Number
Mailing Address
Health Insurance ID Number
Diagnosis and Treatment Information
Provider and Treatment Dates
Financial Account Number

In plain terms

PalmFlex Inc, an Indiana-based wellness and rehabilitation company, filed a data breach notification on July 22, 2026, following a security incident on April 2, 2026. This event exposed sensitive personal information, including full names, Social Security Numbers, and health-related data, for affected individuals.

PalmFlex Inc, an Indiana-based provider of wellness and rehabilitation services, officially reported a data security incident to state regulators on July 22, 2026. This filing confirms that a breach occurred on April 2, 2026, resulting in the unauthorized access to or acquisition of sensitive personal information.

The compromised data types included Full Name, Date of Birth, Social Security Number, Mailing Address, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, and Financial Account Number. These categories represent a broad scope of highly personal and financial details that PalmFlex Inc maintained in its systems.

The exposure of such extensive data can lead to significant risks for those affected. Individuals may face threats such as identity theft, where personal details are used to open fraudulent accounts, or financial fraud. Furthermore, the inclusion of health insurance and treatment information introduces the risk of medical identity theft, potentially leading to unauthorized medical services or incorrect health records.

To help mitigate potential harm, affected individuals should take proactive steps. It is advisable to carefully review all financial statements, credit reports, and Explanation of Benefits (EOB) from your health insurer for any suspicious or unauthorized activity. Consider placing a fraud alert or security freeze on your credit files with the three major credit bureaus.

Additionally, exercise caution with unsolicited communications, as data breaches are often followed by phishing attempts designed to exploit exposed information. Update and use strong, unique passwords for all online accounts. These general measures are widely recommended to help protect your personal information in the wake of a data security incident.

If you received a notification letter about this breach, you can compare it with other Indiana data breach filings or browse all cases.

Commonly recommended next steps

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Did PalmFlex Inc have a data breach?

What the filing says

In plain terms

Commonly recommended next steps

Look up another company

Other breaches reported in Indiana