Franciscan Working Well Reports Data Breach Affecting Sensitive Records

Franciscan Alliance Inc. dba Franciscan Working Well filed a data breach notification with Indiana authorities in February 2026. The incident, which occurred in December 2025, compromised a broad range of sensitive personal, medical, and employment data. Individuals whose information was exposed should take steps to protect themselves.

State: Indiana
Breach date: December 18, 2025
Reported: February 20, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Workers' Compensation Records
Employer and Employment Details

Franciscan Alliance Inc. dba Franciscan Working Well, an occupational health and healthcare provider, reported a data breach to Indiana state regulators on February 20, 2026. The security incident, which is currently under investigation, initially occurred on December 18, 2025, leading to the unauthorized exposure of sensitive information stored within the organization's systems.

According to the official filing, the exposed data categories include individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Workers' Compensation Records, and Employer and Employment Details. The combination of these data types creates elevated risks for affected individuals.

The exposure of such detailed personal and medical records can lead to various forms of identity theft and fraud. For instance, compromised health insurance information could be used for medical identity theft, while other personal identifiers might be exploited for financial or employment-related scams. It is important for individuals to understand the potential long-term implications of such a comprehensive data exposure.

Individuals who receive an official notification about this incident are encouraged to carefully review the letter for specific details provided by Franciscan Working Well. It is generally recommended to remain vigilant for unusual activity on financial and medical accounts. Additionally, consider placing a fraud alert on your credit reports and exercising caution with any unsolicited communications that request personal details.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory