AngMar Management Services, a Mansfield, Texas-based company that manages a network of nearly 100 home health and hospice locations across eleven states under brands including Angels Care Home Health, has notified individuals that their personal and medical information may have been exposed in a data security incident. The company reported the breach to the New Hampshire Attorney General’s Office and began mailing notification letters to affected individuals in September 2026.
Home health and hospice management companies like AngMar handle some of the most sensitive categories of personal information that exist, spanning financial identifiers, government-issued ID numbers, and detailed medical and prescription histories for the patients whose care they help coordinate. Organizations that collect and centralize this volume of sensitive data take on a corresponding duty to protect it.
AngMar Management Services’s Data Breach Investigation
According to a notification letter filed with the New Hampshire Attorney General’s Office by counsel for AngMar Management Services, the company discovered unusual activity on its network on July 20, 2026, and immediately took steps to secure its systems and begin an investigation. AngMar engaged a third-party team of forensic investigators to determine the full scope of the incident. That investigation determined that certain information within AngMar’s computer environment may have been accessed or acquired by an unauthorized actor on or around July 18, 2026.
AngMar then conducted a comprehensive review of the affected data to determine which individuals were impacted and what specific categories of their information were involved. That review was completed on September 10, 2026, roughly seven weeks after the unauthorized access was first identified. AngMar began notifying affected individuals by U.S. mail on September 22, 2026, and is offering complimentary credit monitoring and identity protection services to those affected.
The breadth of information potentially exposed in this incident, which the notification describes as potentially including Social Security numbers, patient ID and medical record numbers, health insurance information, diagnosis and condition information, and prescription information, is notable even by the standards of healthcare data breaches. This combination of financial identifiers and detailed clinical history data creates elevated risk on two fronts: traditional identity theft and financial fraud using the Social Security number, and medical identity theft or insurance fraud using the health-specific data elements.
Home health and hospice management companies occupy a particular position in the healthcare data ecosystem, since a single management company like AngMar can maintain centralized records systems covering patients across dozens of individually branded local agencies and multiple states. This centralization creates operational efficiencies for the company, but it also means that a single network intrusion has the potential to expose records belonging to patients served by many separate care locations at once, rather than being contained to one facility’s systems.
Companies that hold this volume and sensitivity of patient data are common targets for cybercriminals precisely because a successful intrusion can yield a large quantity of high-value data in a single incident. Health insurance and prescription information in particular can be resold or used to submit fraudulent insurance claims, a form of fraud that can take victims a long time to detect since it may not show up on a standard credit report.
The roughly seven-week gap between AngMar’s initial detection of the intrusion and the completion of its data review reflects a common pattern in breaches involving large, unstructured datasets. Before a company can notify anyone, it typically must determine not just that an intrusion occurred, but precisely which records were accessed, which of those records belong to real individuals rather than internal test or administrative data, and what specific categories of information each affected person’s file contained. For a company managing patient records across dozens of separate home health and hospice locations, that review can be substantially more complex than for a single-site provider, since records may be stored across multiple systems inherited from each managed agency.
The home health and hospice sector overall has seen a steady rise in reported data security incidents in recent years, driven in part by the sector’s reliance on electronic health record systems, remote clinician access to patient data in the field, and a general trend toward consolidation among smaller regional agencies under larger management companies. As management companies like AngMar take on operational responsibility for more individual agencies, the volume of sensitive data flowing through their centralized systems grows accordingly, which can make them an attractive target for anyone seeking to obtain a large quantity of exploitable personal and medical information through a single point of entry.
When Did This Breach Occur?
AngMar identified unusual network activity on July 20, 2026, and its investigation determined that unauthorized access likely occurred on or around July 18, 2026. AngMar completed its review of the affected data on September 10, 2026, and began notifying impacted individuals on September 22, 2026.
What Information Was Breached?
According to the notification letter, the information potentially impacted included first and last name in combination with address, date of birth, Social Security number, patient ID, medical record number, health insurance information, service date, diagnosis/condition information, provider name, prescription information, and/or medical history information. AngMar reported that nine New Hampshire residents were affected; the total number of individuals affected across all states served by AngMar-managed locations has not been publicly disclosed.
What You Can Do
- Enroll in the complimentary credit monitoring and identity protection services AngMar is offering to affected individuals.
- Review your credit reports and financial account statements regularly for unauthorized activity.
- Review your health insurance Explanation of Benefits statements for services you did not receive.
- Consider placing a fraud alert or security freeze with the major credit bureaus.
- Report any suspected identity theft or insurance fraud to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against AngMar Management Services
If you received a notification letter about this incident, you may have legal options available to you. Companies that manage sensitive health and financial information on behalf of patients are expected to maintain reasonable data security safeguards, and when a breach occurs, those affected can be left dealing with the ongoing burden of monitoring their accounts and medical records.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
