The Carolina Arthritis Association Data Breach: Reported Filing Facts

Carolina Arthritis Association appears to be a specialized healthcare provider focused on the diagnosis and treatment of rheumatic conditions. As a medical practice, the organization typically collects and stores sensitive patient information, including personal identifiers, medical history, insurance details, and clinical treatment records. In 2025, the association officially reported a data breach to the Indiana Attorney General, confirming that unauthorized access to their systems occurred. Individuals who received a formal data breach notification letter from the organization are encouraged to review the document carefully to understand the scope of the incident. This notification serves to inform patients that their personal and health-related information may have been compromised, necessitating proactive monitoring of their medical and financial accounts for any signs of suspicious activity.

State: Indiana
Breach date: September 27, 2024
Reported: February 27, 2025

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all Indiana data breaches View the full case directory