At Home Medical, a New Jersey healthcare provider, has reported a data breach to federal regulators after an email-related unauthorized access incident affecting 1,091 people. Companies that hold sensitive health information have a responsibility to protect it.
At Home Medical’s Data Breach Investigation
At Home Medical, Inc., a New Jersey healthcare provider, filed a breach report with the U.S. Department of Health and Human Services Office for Civil Rights on September 16, 2026. The filing lists the incident as unauthorized access or disclosure, lists email as the location of the breached information, and reports that 1,091 individuals were affected. The entry also indicates that no business associate was involved in the incident.
Those fields are the core of what has been made public so far. The federal breach portal is a summary listing, not a narrative. It does not describe how the unauthorized access happened, how long it lasted, or which email accounts were involved. It does not say when the incident began or when it was discovered, and it does not say what types of personal or health information were stored in the affected email. As of this writing, a detailed explanation from the provider is not available to us in a form we can verify, so this page sticks to the facts that appear in the federal listing.
A breach involving email is a common pattern in the healthcare sector. Staff routinely use email to coordinate care, send billing questions, share referrals and exchange documents with patients, physicians and insurers. Over time, a mailbox can accumulate attachments and message threads that contain names, dates of birth, addresses, insurance details, account numbers and clinical information. When an unauthorized person gains access to a mailbox, everything stored in it may be exposed, even if the intrusion lasted only a short time. We are not saying that any specific data types were involved in this incident. That detail has not been confirmed publicly, and we will not guess at it.
The number reported to federal regulators, 1,091 people, is also worth reading with care. Under federal health privacy rules, a covered provider that experiences a breach affecting 500 or more people must report it to HHS, and the report is posted on the public portal. A figure in an initial filing can change as a provider completes its review of the affected files, so the count may be revised later. The federal listing also does not break down the number by state, so it does not tell us where the 1,091 people live.
Federal rules generally require covered providers to notify affected individuals without unreasonable delay and no later than 60 days after discovering a breach. Notices are usually sent by mail and typically describe what happened, what information was involved, what the provider is doing in response and what steps a person can take. Many providers also offer complimentary credit monitoring or identity protection for a set period when Social Security numbers are involved. Whether At Home Medical has offered anything of this kind has not been confirmed in the sources available to us.
For patients and customers, the practical effect of a limited public record is uncertainty. If you have received equipment, respiratory services or home care products from At Home Medical, or you have corresponded with the company by email, you may want to watch your mail for a notification letter and keep any notice you receive. A letter is the most reliable way to learn whether your own information was included and what categories of data were involved.
Health information exposed in an email incident can be misused in several ways. Names and insurance details can support medical identity theft, in which someone uses another person’s coverage to obtain care or file false claims. Contact details can be used for phishing messages that reference a real provider or a real order, which makes the scam harder to spot. If financial or government identification numbers were also stored in the affected mailbox, the risk of fraudulent accounts or tax-return fraud increases. These are general risks tied to the type of incident reported, not confirmed facts about what happened to any individual’s data here.
We will update this page if At Home Medical or federal regulators publish additional details, such as the dates of the incident, the data types involved or the notification letters sent to those affected. In the meantime, affected individuals do not need to wait to protect themselves. Reviewing statements and explanation of benefits forms, and placing a fraud alert or credit freeze, are inexpensive steps that can reduce risk while the facts come into focus.
When Did This Breach Occur?
The federal breach listing shows that At Home Medical, Inc. submitted its report to HHS on September 16, 2026. The dates when the unauthorized access began and when it was discovered have not been published in the sources available to us.
What Information Was Breached?
The federal listing identifies email as the location of the breached information but does not list the specific data types involved. Depending on what was stored in the affected email, information in healthcare email can include names, contact details, dates of birth, insurance information and health-related details. At Home Medical has not publicly confirmed which of these, if any, were involved in this incident.
What You Can Do
If you are a patient or customer of At Home Medical, consider these steps to protect yourself:
- Watch your mail for a notification letter from At Home Medical and keep it for your records.
- Review your health insurance explanation of benefits for services or claims you do not recognize.
- Check your credit reports for free at annualcreditreport.com and consider a fraud alert or credit freeze with Equifax, Experian and TransUnion.
- Be cautious of emails, texts and calls that mention your care, equipment orders or insurance plan, and avoid clicking links in unexpected messages.
- Report suspected identity theft to the Federal Trade Commission and your state Attorney General.
File a Data Breach Lawsuit Against At Home Medical
If you received a notice that your information may have been involved in the At Home Medical data breach, you may be entitled to compensation. Healthcare providers are expected to take reasonable steps to protect patient information, and people affected by a breach can face a lasting risk of medical identity theft and fraud.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
