Healthcare In Action 2026 Data Breach
The 2026 Healthcare In Action data breach involved compromised user credentials and unauthorized access to an organizational email account and a limited number of files. According to the official notice, the access occurred from January 28 through January 30, 2026.
Exposed Data Types
6 sensitive14- Ethnicities
- Health insurance information
- Medical record numbers
- Diagnoses
- Treatment information
- Personal health data
- Names
- Dates of birth
- Driver's license numbers
- Email addresses
- Phone numbers
- Unique IDs
- Physical addresses
- Social security numbers
About This Breach
The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving email and other systems and reported 1,143 affected individuals.
Verified Incident Timeline
Healthcare In Action identified suspicious activity on January 30, 2026, disabled the account's access, and began an investigation with an independent forensic firm. The review of information in the affected email and files was completed on March 20, 2026.
What Information May Have Been Affected?
The data varied by person. For patients and clients, it may have included names, dates of birth, driver's-license or state-ID numbers, email addresses, phone numbers, ethnicity, housing-application or HMIS numbers, health-plan names and member IDs, addresses, medical-record numbers, diagnoses, dates and locations of service, treatment information, disability-verification information, medications, and Social Security numbers. For one community member, the notice lists name, address, and Social Security number.
How the Organization Responded
The organization says it ended the unauthorized access, secured the affected systems, reinforced security policies, and provided targeted security training to its workforce. One year of Experian IdentityWorks is available to affected individuals.
What Should Affected People Do?
Notice recipients should monitor credit reports and financial accounts while also reviewing health-plan explanations and medical records for an unfamiliar service or change. If an unexpected message refers to the incident, use Healthcare In Action's official channels before providing identity, health, or account information.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
