The AME Group, an Indiana managed IT services company, is linked to a ransomware incident discovered in early August 2026. Indiana University Health, one of AME’s customers, says AME’s vendor-managed system had unauthorized access to limited imaging center information for certain Southern Indiana patients.
The AME Group’s Data Breach Investigation
The AME Group, also called AME, is an employee-owned managed IT services company headquartered in Vincennes, Indiana. According to ClaimDepot, the company provides IT support, cybersecurity, cloud services and other technology solutions to organizations in education, health care, manufacturing and business. A managed IT provider often has deep access to its customers’ systems, so a problem at the vendor can reach people who never dealt with the vendor directly.
At the time of the incident, AME was serving as an IT vendor for Indiana University Health Affiliated Covered Entity, known as IU Health. In a news release, IU Health said it learned on August 4, 2026 that AME may have been susceptible to a previously unknown software vulnerability connected to the technology services AME was providing to an isolated IU Health legacy system. IU Health said there is no evidence that its own network or core systems were affected and that patient care was not impacted.
IU Health said it carried out an independent review of the external system that AME managed. That review found unauthorized access to limited imaging center information related to certain Southern Indiana patients’ radiology files stored on the legacy system. IU Health said there was no access to its electronic medical record system. These are IU Health’s own statements, and this page reports them as the organization’s account, not as independently confirmed findings.
ClaimDepot reports that the AME incident was a ransomware attack discovered in early August 2026, and that a report about the cyberattack appeared on the open web on August 5, 2026. It also reports that the Vincennes Community School Corporation, another AME customer, announced it had been affected. According to that report, the school district temporarily shut its servers as a precaution, which caused phone and internet outages across its school buildings, and school officials said the district’s own systems were not compromised.
AME has not published its own statement about the incident, according to ClaimDepot. As a result, the public record does not say how many of AME’s customers were affected, how an intruder got in, how long anyone had access, or whether data from other customers was involved. This page does not estimate any of that. Anyone who is a customer of AME, or whose information was held by an organization that uses AME, may want to ask that organization whether it was affected.
The only count available is tied to IU Health’s report. Breach trackers that summarize regulatory filings, including HIPAA Journal and ClaimDepot, list 2,080 individuals for the IU Health incident involving AME. The total number of people across all AME customers has not been disclosed, and the 2,080 figure should not be read as the full scope of the AME incident.
IU Health said the information involved varied by individual, but may have included name, date of birth, health plan member identification number and other limited treatment information associated with the imaging center. Medical details tied to a person’s name and insurance ID can be misused for medical identity theft, insurance fraud or convincing phishing messages that mention a real provider or service.
IU Health began notifying affected individuals on September 29, 2026, and said it is providing dedicated call center support to answer questions. Patients who receive a letter should keep it, because the letter is the best source for what applies to them. Patients who believe they may have been affected but did not receive a letter can contact IU Health directly.
This page will be updated if AME or a regulator publishes more detail. A report of unauthorized access is not a finding about fault, and whether a vendor’s safeguards were adequate remains an open question. Those are the kinds of questions attorneys can ask on behalf of people who were harmed.
When Did This Breach Occur?
IU Health said it learned on August 4, 2026 that AME may have been susceptible to the software vulnerability. ClaimDepot reports that a report about the cyberattack appeared on the open web on August 5, 2026.
IU Health began notifying affected individuals on September 29, 2026. AME has not announced its own timeline.
What Information Was Breached?
IU Health said the information involved varied by individual, but may have included name, date of birth, health plan member identification number and other limited treatment information associated with an imaging center.
The announcement did not say that other categories were involved. AME has not described what information of its other customers may have been affected.
What You Can Do
If you received a notice related to The AME Group or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Review explanation of benefits statements from your health plan for services you do not recognize, and be wary of calls or messages that mention imaging or radiology services you did not request.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against The AME Group
If you were notified that your personal information was exposed in an incident involving The AME Group, you may have legal options. Companies are expected to safeguard the sensitive information entrusted to them, and a class action can help hold them accountable when they fail to do so.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
