Franciscan Alliance Data Breach Exposes Health and Employment Details
Franciscan Alliance, via its Franciscan Working Well division, reported a data security incident in Indiana on February 20, 2026. This breach, which occurred on December 18, 2025, involved the exposure of sensitive personal, medical, and employment-related information. Individuals potentially affected should remain vigilant regarding their personal data.
- State
- Indiana
- Breach date
- December 18, 2025
- Reported
- February 20, 2026
What may have been exposed
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Workers' Compensation Records
- Employer and Employment Details
Franciscan Alliance, operating as Franciscan Working Well in Indiana, formally reported a data security incident to state authorities on February 20, 2026. The breach event itself was identified on December 18, 2025, indicating that sensitive data held by the occupational health provider may have been compromised.
The compromised information included Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Workers' Compensation Records, and Employer and Employment Details. This comprehensive set of data points could be particularly valuable to malicious actors, creating a range of potential risks for affected individuals.
Exposure of such detailed personal, health, and employment information can lead to various forms of identity theft and fraud. This might include attempts to open new accounts, file fraudulent tax returns, or gain unauthorized medical services. Unlike financial data which can often be changed, certain exposed health records and identifiers are permanent.
Individuals who receive an official notification letter from Franciscan Alliance should carefully review the information provided. It is generally recommended to monitor credit reports for any suspicious activity and consider placing a fraud alert or credit freeze with major credit bureaus. Regularly changing passwords for online accounts and exercising caution with unsolicited communications are also important protective measures.
This information is based on public data breach filings made with regulatory bodies in Indiana. Affected individuals are encouraged to refer to their official breach notification letters for specific details and recommended actions.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Indiana Attorney General filing
Related data breach cases
- Bozeman School District
- Bozeman School DistrictIN
- Teamsters Local 17
- Teamsters Local 17IN
- Bank
- BankIN
- PeoplesBank
- World Acceptance Corporation
- McKenzie Creative Brands
- MEBS Global Reach
- Midvale Indemnity and American Family Connect Insurance Company
- American Motorcyclist Association
- Nishiyamato Academy
- Deer Management Co. LLC dba Bessemer Venture Partners