Advantage Home Health Care, an Indiana home care provider, has notified patients and employees of a data security incident in which an unauthorized party reached one of its servers and acquired files containing sensitive personal and health information.
Advantage Home Health Care’s Data Breach Investigation
Advantage Home Health Care, which its own website describes as an Indiana-owned provider serving patients through nine locations across 46 counties, published a Notice of Data Breach dated August 25, 2026. The notice explains that the company became aware of a security incident on June 16, 2026, in which an unauthorized third party gained access to one of its computer servers. Ten days later, on June 26, 2026, the company learned that the unauthorized party had acquired data that may have included personal information.
Based on its investigation, the company determined that the intruder first got into the server on June 9, 2026, a week before the activity was noticed. During that window the unauthorized party was able to take certain documents and information stored on the server. The company says it followed its incident response plans, took protective steps to stop the unauthorized activity, brought in outside security and forensic specialists, and notified and worked with U.S. federal law enforcement. It also says it made efforts to prevent the unauthorized party from keeping, using or further disclosing the data it obtained.
Public breach trackers report that roughly 19,851 people were affected. The company’s notice does not state a total, so that figure should be treated as the number reported through regulatory disclosures rather than a count confirmed in the notice itself. The notice makes clear that the information involved differs from person to person and depends on whether someone was a patient, a current or former employee, or a member of the employee health plan.
Notification letters began going out around August 25, 2026, roughly two months after the company confirmed that data had been acquired. Delays of this kind are common after a server intrusion. Once the company knows files were taken, it generally has to work out which documents were exposed, review them to identify whose information is inside, and gather current mailing addresses before regulators and individuals can be notified. For people who received a letter, that gap means personal information may have been in the hands of an unauthorized party for months before they learned about it.
Home care and home health providers hold a particularly sensitive mix of records. A single agency may keep patient intake files, notes about medical conditions and care received, billing records, and a full set of employment and benefits paperwork for caregivers, all in overlapping systems. When a server holding that kind of material is accessed, the same incident can expose both patients and the employees who care for them. That is why the notice describes separate categories of affected information for each group.
The company states that it is not aware that the information involved has been or will be used or misused for fraudulent purposes. Even so, information such as a Social Security number and date of birth does not expire, and it can be used to open accounts, file false tax returns or commit medical identity fraud long after a breach is announced. Individuals who receive a notice letter are generally encouraged to take the offered protections seriously and to monitor their accounts, credit reports and health insurance statements over the coming months and years.
Advantage Home Health Care says it is continuing to evaluate and deploy additional security protocols, continuous monitoring and staff training meant to help prevent and defend against future cyber threats. It has set up a dedicated toll-free line for questions about the incident, and each notification letter includes a unique enrollment code for the complimentary monitoring services described below. Anyone who believes they may have been affected but has not received a letter can use that line to ask whether their information was involved.
When Did This Breach Occur?
The unauthorized party first accessed the server on June 9, 2026. Advantage Home Health Care became aware of the incident on June 16, 2026, and learned on June 26, 2026 that data may have been acquired. The company began notifying affected individuals on August 25, 2026.
What Information Was Breached?
The information involved varies by individual. For patients, it may include first and last name, date of birth, Social Security number, address, phone number, and information about medical conditions and care received. For current or former employees, it may include name, date of birth, Social Security number, address, phone number and employment information. Employees who were enrolled in the company’s health plan may also have had health insurance, plan enrollment, claims, healthcare provider and health benefits information involved.
What You Can Do
If you received a notification letter from Advantage Home Health Care, consider these steps to protect yourself:
- Enroll in the 12 months of credit monitoring, single bureau credit report, credit score and cyber monitoring offered through Cyberscout, using the unique code in your letter. Parents and guardians of affected minors can enroll for cyber monitoring too.
- Place a fraud alert or security freeze with Equifax, Experian and TransUnion.
- Review your credit reports at annualcreditreport.com and your health insurance explanation of benefits for services you did not receive.
- Watch for phishing calls, texts and emails that reference your care or employment.
- Report suspected identity theft to the Federal Trade Commission and your state Attorney General.
File a Data Breach Lawsuit Against Advantage Home Health Care
If you received a notice that your personal or health information was involved in the Advantage Home Health Care data breach, you may be entitled to compensation. Organizations that collect Social Security numbers and medical information are expected to take reasonable steps to protect them, and people affected by a breach can face a lasting risk of identity theft and medical identity fraud.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
