DataBreachInformation.com
MonitoringIndiana AG filing · February 20, 2026

Franciscan Alliance Data Breach Exposes Health and Employment Details

Franciscan Alliance, via its Franciscan Working Well division, reported a data security incident in Indiana on February 20, 2026. This breach, which occurred on December 18, 2025, involved the exposure of sensitive personal, medical, and employment-related information. Individuals potentially affected should remain vigilant regarding their personal data.

State
Indiana
Breach date
December 18, 2025
Reported
February 20, 2026

What may have been exposed

  • Full Name
  • Date of Birth
  • Social Security Number
  • Medical Record Number
  • Health Insurance ID Number
  • Diagnosis and Treatment Information
  • Workers' Compensation Records
  • Employer and Employment Details

Franciscan Alliance, operating as Franciscan Working Well in Indiana, formally reported a data security incident to state authorities on February 20, 2026. The breach event itself was identified on December 18, 2025, indicating that sensitive data held by the occupational health provider may have been compromised.

The compromised information included Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Workers' Compensation Records, and Employer and Employment Details. This comprehensive set of data points could be particularly valuable to malicious actors, creating a range of potential risks for affected individuals.

Exposure of such detailed personal, health, and employment information can lead to various forms of identity theft and fraud. This might include attempts to open new accounts, file fraudulent tax returns, or gain unauthorized medical services. Unlike financial data which can often be changed, certain exposed health records and identifiers are permanent.

Individuals who receive an official notification letter from Franciscan Alliance should carefully review the information provided. It is generally recommended to monitor credit reports for any suspicious activity and consider placing a fraud alert or credit freeze with major credit bureaus. Regularly changing passwords for online accounts and exercising caution with unsolicited communications are also important protective measures.

This information is based on public data breach filings made with regulatory bodies in Indiana. Affected individuals are encouraged to refer to their official breach notification letters for specific details and recommended actions.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

  • Freeze your credit

    Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.

  • Guard against tax fraud

    File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.

  • Check for medical identity theft

    Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.

  • Stay alert to targeted scams

    Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.

  • Keep your notification letter

    Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases