LHC Group
Disclosed Mar 26, 2026162,578 affectedConfirmed
The covered entity (CE), LHC Group reported that the subcontractor of its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of 8,644 individuals. The PHI involved demographic and financial information. The CE notified HHS and the BA’s subcontractor notified the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 162,578 (as reported by the organization) |
|---|---|
| Disclosed | Mar 26, 2026 |
| Discovered | Apr 7, 2026 |
| Happened | Apr 7, 2026 |
| Attack | Hacking |
| Data exposed | NamesHealthSocial Security numbersInsuranceDates of birthAddresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
Notices filed
History of this record
2026-04-02 to 2026-03-26by backfillSource
empty to The covered entity (CE), LHC Group reported that the subcontractor of its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of 8,644 individuals. The PHI involved demographic anby backfillSource
2026-09-04 to 2026-04-02by backfillSource
["names","health"] to ["names","health","ssn","insurance","dob","addresses"]by backfillSource
hhs to organizationby backfillSource
500 to 162578by backfillSource
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 500by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.