LHC Group
Disclosed Mar 26, 20266 months ago162,578 affectedConfirmed
The covered entity (CE), LHC Group reported that the subcontractor of its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of 8,644 individuals. The PHI involved demographic and financial information. The CE notified HHS and the BA’s subcontractor notified the affected individuals. OCR provided technical assistance to the CE regarding the HIPAA Rules.
What is known
| People affected | 162,578 (as reported by the organization) |
|---|---|
| Disclosed | Mar 26, 2026 |
| Discovered | Apr 7, 2026 |
| Happened | Apr 7, 2026 |
| Attack | Hacking |
| Data exposed | Names, Health, Social Security numbers, Insurance, Dates of birth, Addresses |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Washington Attorney General breach notice: LHC Groupatg.wa.gov · Official notice | Official notice |
| HHS OCR breach report: LHC Group (Healthcare Provider, LA)ocrportal.hhs.gov · Official notice | Official notice |
| Texas Attorney General data security breach report BR-0005312: LHC Groupoag.my.site.com · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Mar 26 | 8,644 |
| Texas AGresidents of TX | Apr 2 | 522 |
| Washington AGresidents of WA | Sep 4 | 6,602 |
| HHS OCRtotal | Sep 4 | 500 |
| Texas AGresidents of TX | Sep 4 | 16,885 |
History of this record
- 2026-09-25 · disclosed: 2026-04-02 to 2026-03-26 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), LHC Group reported that the subcontractor of its business associate (BA) experienced a breach of its network that affected the protected health information (PHI) of 8,644 individuals. The PHI involved demographic an · backfill source
- 2026-09-25 · disclosed: 2026-09-04 to 2026-04-02 · backfill source
- 2026-09-25 · data_types: ["names","health"] to ["names","health","ssn","insurance","dob","addresses"] · backfill source
- 2026-09-25 · records_basis: hhs to organization · backfill source
- 2026-09-25 · records: 500 to 162578 · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: empty to hhs · backfill source
- 2026-09-25 · records: empty to 500 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Washington AG), confirmed by Washington AG. Record counts are as reported. Not legal advice.