The Loretto Hospital Data Breach: Reported Filing Facts

Loretto Hospital is a healthcare provider that manages sensitive patient information as part of its daily operations. In the course of providing medical services, the organization collects and stores highly personal data, including medical histories, insurance details, and government-issued identification numbers. This data breach was officially reported to the Indiana Attorney General in 2025, confirming that unauthorized access to certain patient records occurred. If you have received a formal data breach notification letter, it indicates that your personal or health-related information may have been involved in this incident. We recommend reviewing the details provided in your letter carefully and following the outlined steps to protect your identity and monitor your medical accounts for any signs of unauthorized activity.

State: Indiana
Breach date: January 17, 2025
Reported: July 24, 2025

What to do if you were affected

These general steps can help limit the risk of identity theft and fraud after any data breach.

Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Related data breach cases

Browse all Indiana data breaches View the full case directory