Easterseals Northeast Indiana 2025 Data Breach (3.2 Thousand People Affected)

The 2025 Easterseals Northeast Indiana data breach involved an unauthorized person accessing and acquiring protected health information from the organization's network. Easterseals says it detected suspicious network activity on September 4, 2025.

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/IT incident involving a network server and reported 3,158 affected individuals.

Verified Incident Timeline

Easterseals detected suspicious activity on September 4, 2025 and took steps to secure its systems. On November 10, 2025, the organization learned that the event may have involved the unauthorized acquisition of certain data and began an investigation with cybersecurity professionals. The investigation determined that an unauthorized person accessed and acquired protected health information.

What Information May Have Been Affected?

The information varied by person but may have included first and last names together with Social Security numbers, health-insurance information, medical diagnosis and treatment information, contact information, and dates of birth.

How the Organization Responded

Easterseals says it took additional steps to reduce the risk of a similar event and reported the incident to federal law enforcement, the HHS Office for Civil Rights, and applicable state attorneys general. It offered free credit monitoring to people whose Social Security numbers were involved and established a call center for questions.

What Should Affected People Do?

Notice recipients should enroll in the offered credit-monitoring service if eligible and review credit reports, health-insurance explanations, and medical records for activity they do not recognize. Incident-related links or contact details should be verified through Easterseals' official channels before use.