Indico Data Solutions

Disclosed Aug 7, 20264,840 affectedConfirmed

Data workflow vendor Indico says customer documents with SSNs were exposed

Indico Data Solutions, which processes documents for companies, notified people that unauthorized access to its online repositories in May 2026 exposed documents containing names, SSNs and financial account numbers supplied by its customers.

What is known

People affected	4,840 (as reported to HHS)
Disclosed	Aug 7, 2026
Discovered	May 7, 2026
Happened	May 5, 2026
Attack	Hacking
Data exposed	NamesHealthSocial Security numbersFinancialGovernment IDsInsurancePayment cardsDates of birthAddresses
Sector	Data brokers · US
Status	Confirmed

Sources

Official noticeoag.ca.gov

California Attorney General breach notice: Indico Data Solutions

Official noticeocrportal.hhs.gov

HHS OCR breach report: Indico Data Solutions (Business Associate, MA)

Regulatoroag.ca.gov

California AG breach report: Indico Data Solutions

Regulatoroag.ca.gov

Indico sample notification letter

Official noticeoag.my.site.com

Texas Attorney General data security breach report BR-0005289: Indico Data Solutions

Official noticein.gov

Indiana Attorney General 2026 data breach report: Indico Data Solutions

Notices filed

TotalAug 7

HHS OCR4,840 people

Residents of INAug 17

Indiana AG176 people

Residents of CAAug 27

California AGCount not stated

TotalAug 27

ResearchCount not stated

Residents of TXSep 1

Texas AG2,128 people

Residents of CAOct 27

California AGCount not stated

Residents of TXOct 28

Texas AG2,128 people

History of this record

source2026-10-02

empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-October-Year-to-Date-Report-2026.pdfby dailySource

data_types2026-09-25

["names","health","ssn","financial"] to ["names","health","ssn","financial","government-id","insurance","payment-card","dob","addresses"]by backfillSource

sector2026-09-25

tech to databy seedSource

data_types2026-09-25

["names","health"] to ["names","health","ssn","financial"]by seedSource

discovered2026-09-25

empty to 2026-05-07by seedSource

summary2026-09-25

empty to Indico Data Solutions, which processes documents for companies, notified people that unauthorized access to its online repositories in May 2026 exposed documents containing names, SSNs and financial account numbers supplied by its customersby seedSource

title2026-09-25

empty to Data workflow vendor Indico says customer documents with SSNs were exposedby seedSource

attack2026-09-25

unknown to hackingby backfillSource

data_types2026-09-25

[] to ["names","health"]by backfillSource

records_basis2026-09-25

empty to hhsby backfillSource

records2026-09-25

empty to 4840by backfillSource

disclosed2026-09-25

2026-08-27 to 2026-08-07by backfillSource

Added2026-09-25

First recordedby backfillSource

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about Indico Data Solutions