Easterseals Northeast Indiana 2025 Data Breach
The 2025 Easterseals Northeast Indiana data breach involved an unauthorized person accessing and acquiring protected health information from the organization's network. Easterseals says it detected suspicious network activity on September 4, 2025.
Exposed Data Types
3 sensitive7- Health insurance information
- Medical information
- Treatment information
- Names
- Social security numbers
- Contact information
- Dates of birth
About This Breach
The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/IT incident involving a network server and reported 3,158 affected individuals.
Verified Incident Timeline
Easterseals detected suspicious activity on September 4, 2025 and took steps to secure its systems. On November 10, 2025, the organization learned that the event may have involved the unauthorized acquisition of certain data and began an investigation with cybersecurity professionals. The investigation determined that an unauthorized person accessed and acquired protected health information.
What Information May Have Been Affected?
The information varied by person but may have included first and last names together with Social Security numbers, health-insurance information, medical diagnosis and treatment information, contact information, and dates of birth.
How the Organization Responded
Easterseals says it took additional steps to reduce the risk of a similar event and reported the incident to federal law enforcement, the HHS Office for Civil Rights, and applicable state attorneys general. It offered free credit monitoring to people whose Social Security numbers were involved and established a call center for questions.
What Should Affected People Do?
Notice recipients should enroll in the offered credit-monitoring service if eligible and review credit reports, health-insurance explanations, and medical records for activity they do not recognize. Incident-related links or contact details should be verified through Easterseals' official channels before use.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
