The Crossroad Child and Family Services Data Breach: Reported Filing Facts

Crossroad Child and Family Services appears to be a specialized healthcare and social services provider focused on behavioral health, residential treatment, and family support programs. Given the nature of these services, the organization typically collects and maintains sensitive personal information, including detailed medical histories, diagnostic records, and government-issued identification required for insurance billing and clinical care. This data breach was officially reported to the Indiana Attorney General in 2025, confirming that unauthorized access to protected information occurred. If you received a data breach notification letter, it indicates that your personal or health-related information was likely contained within the impacted systems. We encourage you to review the letter carefully to understand the specific scope of the exposure and the identity protection services being offered by the organization.

State: Indiana
Breach date: October 14, 2025
Reported: October 27, 2025

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all Indiana data breaches View the full case directory