Three Oaks Hospice of Austin, a hospice care provider located in Austin, Texas, has disclosed a data breach involving sensitive patient information. The company notified the Texas Attorney General’s office on September 17, 2026, reporting that at least 327 individuals had their personal data exposed. Organizations that handle sensitive health and identity data are expected to maintain reasonable safeguards to protect that information from unauthorized access.
Three Oaks Hospice of Austin’s Data Breach Investigation
According to the notification filed with the Texas Attorney General, Three Oaks Hospice of Austin determined that an unauthorized party may have accessed patient records. The filing identifies names, Social Security numbers, medical information, health insurance information, and dates of birth as categories of data involved in the incident. Three Oaks Hospice of Austin has not publicly disclosed the specific cause of the breach or the method of unauthorized access at this time.
Hospice and healthcare providers are increasingly common targets for data breaches because they store large volumes of highly sensitive information, including Social Security numbers, medical histories, and insurance details, that can be exploited for identity theft, medical fraud, or resold on illicit marketplaces. The combination of Social Security numbers and medical records exposed here is particularly valuable to bad actors, since it can support both financial identity theft and medical identity theft simultaneously.
When Social Security numbers and health insurance information are exposed together, affected individuals face compounded risks: fraudulent credit accounts opened in their name, fraudulent insurance claims filed using their coverage, and the potential for incorrect information to be added to their permanent medical record as a result of medical identity theft. Untangling fraudulent insurance claims can be a lengthy process, often requiring direct engagement with insurers and healthcare providers to correct billing records.
Regulatory notification requirements are designed to ensure affected individuals learn of a breach promptly so they can take protective measures, such as placing fraud alerts, monitoring credit reports, and reviewing insurance statements for unfamiliar activity, before any exposed information can be misused.
When Did This Breach Occur?
Three Oaks Hospice of Austin’s notification to the Texas Attorney General was filed and published on September 17, 2026. The company has not publicly disclosed the date the breach was first discovered or the date the underlying unauthorized access is believed to have occurred.
What Information Was Breached?
Per the filing with the Texas Attorney General, the categories of information involved include patients’ names, Social Security numbers, medical information, health insurance information, and dates of birth.
What You Can Do
If you believe you may have been affected by the Three Oaks Hospice of Austin data breach, consider taking the following steps:
- Read any breach notification letter from Three Oaks Hospice of Austin carefully.
- Place a fraud alert or credit freeze with the three major credit bureaus.
- Monitor your credit reports and health insurance statements for unfamiliar activity.
- Request a copy of your medical records to check for inaccuracies caused by medical identity theft.
- Report any suspicious activity to your financial institutions, insurer, and local law enforcement.
File a Data Breach Lawsuit Against Three Oaks Hospice of Austin
If you were affected by this breach, you may have legal options available to you. Companies entrusted with Social Security numbers and medical records are expected to implement reasonable data security measures, and a failure to do so can form the basis of a data breach lawsuit.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
