Adams Health Network Data Breach
The Adams Health Network data breach affected 5,305 people after phishing compromised an employee email account in December 2025 and exposed identity and health information.
Exposed Data Types
2 sensitive6- Diagnoses
- Health insurance information
- Names
- Physical addresses
- Dates of birth
- Social security numbers
About This Breach
Adams Health Network operates Adams Memorial Hospital and related healthcare services in Indiana. The incident was limited to the email account; the organization said its electronic medical record system was not accessed.
What Happened in the Adams Health Network Breach?
The organization learned on March 12, 2026 that an employee account had been accessed without authorization and secured the account. Its investigation connected the access to a phishing attack that began on December 22, 2025.
The same sentence in the official online notice mistakenly gives the incident year as 2026; the March 2026 discovery date and supporting regulatory chronology establish December 22, 2025 as the start. The organization said the actor did not access its electronic medical record system or financial account information.
What Information Was Affected?
Depending on the person, the email account may have contained names, addresses, dates of birth, Social Security numbers, dates of service, diagnoses, healthcare charges, or insurance information.
Every field should not be assumed to apply to everyone. Healthcare charge information does not mean bank-account or payment-card data; the organization specifically said financial account information and its electronic medical record system were not accessed.
How Many People Were Affected?
The official U.S. Department of Health and Human Services breach portal reports 5,305 affected individuals. The portal classifies the event as a hacking or IT incident involving email.
What Should Affected People Do?
Notice recipients should rely on the data scope in their own letters and review benefit statements, medical bills, and insurance claims for unfamiliar services, providers, or charges.
People whose Social Security numbers were involved can consider the offered 12 months of complimentary credit monitoring, monitor credit reports, and review free credit-freeze or fraud-alert options. Unexpected messages should be verified through an independent channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
