LHC GROUP, INC.

bd_ac420531928d5c01 · schema v1 · pii pii-v2

LHC Group, Inc. notified patients of a data breach involving a third-party vendor. On April 7, 2026, LHC became aware of a vishing attack against an employee, leading to credential theft. A threat actor accessed patient PHI from the vendor's platform between April 7 and April 15, 2026. Affected data included names, addresses, dates of birth, SSNs (limited), clinical summaries, treatment plans, diagnosis codes, and insurance information. LHC engaged forensic experts, notified the FBI, disabled the compromised account, and is offering two years of credit monitoring.

J jump to incidentP pin to compareR raw source