Privacy Unpacked- Status
- Confirmed breach
- People affected
- 33,158 patients
- Reported
- 16 September 2026
What was exposed
- Health and medical information
How it happened
- How
- Hacking
Hacking/IT Incident
source
Confirmed breach
WindRose Health Network data breach
USUnited States · IN
WindRose Health Network (IN, United States) notified the US Department of Health and Human Services of a data breach on 16 September 2026. It affected 33,158 patients. Exposed: Health and medical information.
If WindRose Health Network had your data
- Look for WindRose Health Network’s own notice or letter: it should say what of yours was involved. Keep it.
- Check your health insurer’s statements for treatment you never had.
- Expect scams that use your details: calls, texts or emails pretending to be WindRose Health Network, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.
More breaches in United States
- Johns Hopkins Bayview Medical Center Health and medical informationFinancial account and card detailsAdmission dates+3 3.1Kpatients
- Monmouth University Social Security numbersGovernment ID numbersHealth and medical information+2 346Vermont residents
- Frontline Education Social Security numbers 3KVermont residents
- USForex –not reported
- Alpha Omega Alpha Honor Medical Society Financial account and card details 12Vermont residents
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.