Decatur Diagnostic Laboratory 2026 Data Breach

The primary source is the Notice of Data Privacy Event linked from Decatur Diagnostic Laboratory's own website. The company directly explains the data-theft claims, comprehensive forensic investigation, exfiltrated data set, verified fields, additional safeguards, and protective steps recommended to affected people.

The second confirmation is HHS OCR's breach report, which identifies DDL as a healthcare provider, classifies the event as a hacking/IT incident involving a network server, reports 500 individuals, and gives a June 16, 2026 submission date. Claim Depot adds the public April 14 data-theft claim to the chronology while linking HHS and official notices.

A reliable secondary source reports that a cyberattack and data-theft claim concerning the laboratory became public on April 14. DDL's official language does not identify an attacker or access date, but it confirms learning of theft claims connected to its data and confirms that information in the event data set was exfiltrated.

The incident date is based on the earliest technical activity that can be verified from public sources.

DDL opened a comprehensive third-party forensic investigation and data review to determine whether sensitive information was present and to whom it related. According to the Massachusetts official consumer letter, that work concluded on or about May 28, 2026 and found that affected files may have contained personal information.

The company notified potentially affected people, contained its network, and implemented additional safeguards intended to reduce the chance of a similar event. The Massachusetts letter is dated July 13, 2026 and offers complimentary monitoring through IDX. DDL said it found no evidence of fraud or misuse, which does not mean future risk is zero.

The exfiltrated data set may contain a name together with one or more of a date of birth, driver's-license number, or Social Security number. These fields create substantial exposure to identity theft, fraudulent account opening, credit fraud, and targeted social engineering.

The official notice does not say every field was present for all 500 people; it expressly says some individuals had no information in the data set and that fields varied by person. LeakData therefore does not assume everyone's SSN or driver's-license number was involved. Passwords, payment cards, and bank accounts are not added because the source does not list them.

Possible healthcare-related fields are a patient code and medical-record number. Because DDL provides diagnostic testing and laboratory services, these identifiers are sensitive for associating a person with a laboratory record and may increase medical-identity impersonation risk.

The official notice does not list diagnoses, test results, treatment, prescriptions, health insurance, or detailed clinical histories among the affected fields. Scope stays limited to the categories explicitly named by the source.

People should review financial accounts, credit reports, and health-insurance explanation-of-benefits statements for unusual activity over the next 12 to 24 months. If an unknown account, inquiry, laboratory service, or insurance claim appears, the relevant organization should be contacted through a verified channel; a fraud alert or free credit freeze may also be appropriate.

DDL published 256-355-9045 in its website notice and an IDX assistance line in individual letters. SSNs, driver's-license details, or health information should not be shared through unexpected links or calls claiming to represent the company. If a suspicious message or account event appears, it should be verified through the organization’s current official contact channel without using links in the message. When an individual notification letter is available, it is the primary source for the person-specific data scope and protection options offered. Dates and data categories should be interpreted only to the extent supported by public sources; undisclosed details should not be treated as confirmed. Regular review of credit, financial, and healthcare accounts can help identify possible misuse early.