Elevation Hospice of Utah Data Breach

Elevation Hospice of Utah, a hospice care provider based in Draper, Utah, has disclosed a data breach involving sensitive patient information. The company reported the incident to the Texas Attorney General’s office on September 17, 2026, indicating that at least 437 individuals had their personal information exposed. Companies entrusted with medical records and health insurance data have a heightened responsibility to protect that information from unauthorized access.

Elevation Hospice of Utah’s Data Breach Investigation

According to the notification filed with the Texas Attorney General, Elevation Hospice of Utah discovered that patient data may have been accessed by an unauthorized party. The filing lists medical information, health insurance information, and dates of birth as the categories of data involved. As of this report, Elevation Hospice of Utah has not publicly disclosed the specific cause of the breach or how the unauthorized access occurred.

Hospice and home health providers are frequent targets for cyberattacks because they maintain large volumes of protected health information, including diagnoses, treatment histories, and insurance details, that can be misused for medical identity theft or insurance fraud. The healthcare sector overall has seen a sustained rise in reported breaches over the past several years, driven in part by the high value that stolen medical records carry on illicit marketplaces compared to other types of personal data.

When a hospice or healthcare provider experiences a breach involving medical and health insurance information, affected individuals face a distinct set of risks beyond the more commonly discussed identity theft. Medical identity theft can result in fraudulent insurance claims filed under a victim’s name, incorrect information being added to their medical records, and disputes with insurers over billing that can take months to untangle. Because hospice patients and their families are often already navigating a difficult period, the added burden of resolving a data breach can be especially significant.

Regulatory notification timelines for healthcare-related data breaches can vary based on when the company confirms the scope of an intrusion, but prompt notice to affected individuals and state regulators is intended to give people the earliest possible opportunity to take protective steps, such as monitoring their insurance statements and credit reports for suspicious activity.

When Did This Breach Occur?

Elevation Hospice of Utah’s notification to the Texas Attorney General was filed and published on September 17, 2026. The company has not publicly released additional detail regarding the date the breach was first discovered or when the unauthorized access is believed to have occurred.

What Information Was Breached?

Per the filing with the Texas Attorney General, the categories of information involved in this breach include patients’ medical information, health insurance information, and dates of birth. Elevation Hospice of Utah has not publicly disclosed whether additional data types, such as Social Security numbers, were involved.

What You Can Do

If you believe you may have been affected by the Elevation Hospice of Utah data breach, consider taking the following steps:

• Review any correspondence from Elevation Hospice of Utah regarding the breach carefully.
• Monitor your health insurance statements (Explanation of Benefits) for any services or claims you do not recognize.
• Request a copy of your medical records to check for inaccuracies that could indicate medical identity theft.
• Consider placing a fraud alert or credit freeze with the major credit bureaus as a precaution.
• Report any suspicious activity to your insurance provider and, if necessary, local law enforcement.

File a Data Breach Lawsuit Against Elevation Hospice of Utah

If you were affected by this breach, you may have legal options available to you. Companies that handle sensitive medical and health insurance data are expected to maintain reasonable safeguards to prevent unauthorized access, and failure to do so can form the basis of a data breach lawsuit.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.