Amedisys

Disclosed Mar 26, 20269,111 affectedConfirmed

The covered entity (CE), Amedisys, reported that itS business associate (BA) experienced a breach of its network that affected the protected health information (PHI) 9,111 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, the media, and the affected individuals. In response to the breach, the CE and BA implemented additional administrative, technical, and security safeguards to better protect PHI.

What is known

People affected	9,111 (as reported by the organization)
Disclosed	Mar 26, 2026
Discovered	Feb 23, 2026
Happened	Oct 31, 2025
Attack	Hacking
Data exposed	HealthInsuranceDates of birthAddressesNames
Sector	Healthcare · US
Status	Confirmed

Sources

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0004953: Amedisys

Official noticeocrportal.hhs.gov

HHS OCR breach report (archive, resolved): Amedisys (Healthcare Provider, LA)

Notices filed

TotalMar 26

HHS archive9,111 people

Residents of TXApr 2

Texas AG1,080 people

Other breaches at Amedisys

Insider breachInsider exposed names, Social Security numbers and names. Reported to the HHS archive.6,909 affectedHealthcareUSMar 1, 2015

History of this record

attack2026-09-25

unknown to hackingby backfillSource

disclosed2026-09-25

2026-04-02 to 2026-03-26by backfillSource

summary2026-09-25

empty to The covered entity (CE), Amedisys, reported that itS business associate (BA) experienced a breach of its network that affected the protected health information (PHI) 9,111 individuals. The PHI involved included clinical and demographic infoby backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (Texas AG), confirmed by Texas AG. Record counts are as reported. Not legal advice.

Everything about Amedisys