Three Oaks Hospice of Dallas, a hospice care provider serving the Dallas, Texas area, has disclosed a data breach involving sensitive patient information. The company notified the Texas Attorney General’s office on September 17, 2026, reporting that at least 3,034 individuals had their personal data exposed, making this one of the larger hospice-sector breaches reported to Texas regulators in recent months. Organizations that handle sensitive health and identity data are expected to maintain reasonable safeguards to prevent unauthorized access.
Three Oaks Hospice of Dallas’s Data Breach Investigation
According to the notification filed with the Texas Attorney General, Three Oaks Hospice of Dallas determined that an unauthorized party may have accessed patient records. The filing identifies names, Social Security numbers, medical information, health insurance information, and dates of birth as categories of data involved. Three Oaks Hospice of Dallas has not publicly disclosed the specific cause of the breach or the method of unauthorized access at this time.
Hospice and healthcare providers are increasingly common targets for cyberattacks because they store large volumes of highly sensitive information, including Social Security numbers, medical histories, and insurance details, that can be exploited for identity theft, medical fraud, or resold on illicit marketplaces. When a breach affects thousands of individuals, as this one appears to, the scale increases the likelihood that stolen data will surface in bulk on dark web marketplaces, where it can be purchased and misused by multiple bad actors over an extended period.
The combination of Social Security numbers, dates of birth, and medical records exposed in this incident creates compounded risk: fraudulent credit accounts opened using stolen identity information, fraudulent insurance claims filed under a victim’s coverage, and the possibility of inaccurate information being added to a person’s permanent medical record. Resolving fraudulent medical claims often requires direct engagement with insurers and healthcare providers, a process that can take months to fully correct.
Regulatory notification requirements exist so that affected individuals learn of a breach as early as possible, giving them time to take protective measures such as placing fraud alerts, freezing credit, and closely monitoring both financial accounts and insurance statements for unfamiliar activity.
When Did This Breach Occur?
Three Oaks Hospice of Dallas’s notification to the Texas Attorney General was filed and published on September 17, 2026. The company has not publicly disclosed the date the breach was first discovered or the date the underlying unauthorized access is believed to have occurred.
What Information Was Breached?
Per the filing with the Texas Attorney General, the categories of information involved include patients’ names, Social Security numbers, medical information, health insurance information, and dates of birth.
What You Can Do
If you believe you may have been affected by the Three Oaks Hospice of Dallas data breach, consider taking the following steps:
- Read any breach notification letter from Three Oaks Hospice of Dallas carefully.
- Place a fraud alert or credit freeze with the three major credit bureaus.
- Monitor your credit reports and health insurance statements for unfamiliar activity.
- Request a copy of your medical records to check for inaccuracies caused by medical identity theft.
- Report any suspicious activity to your financial institutions, insurer, and local law enforcement.
File a Data Breach Lawsuit Against Three Oaks Hospice of Dallas
If you were affected by this breach, you may have legal options available to you. Companies entrusted with Social Security numbers and medical records are expected to implement reasonable data security measures, and a failure to do so can form the basis of a data breach lawsuit.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
