Park Place Behavioral Healthcare Reports Data Breach in Indiana

Osceola Mental Health, doing business as Park Place Behavioral Healthcare, filed a data breach report in Indiana on September 23, 2026, following an incident on July 5, 2026. The breach exposed sensitive personal and medical information, necessitating vigilance from affected individuals. This report provides factual details sourced from official filings.

State: Indiana
Breach date: July 5, 2026
Reported: September 23, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Provider and Treatment Dates
Home Address
Phone Number

Osceola Mental Health, operating as Park Place Behavioral Healthcare, reported a data security incident to Indiana authorities on September 23, 2026. The breach, which occurred on July 5, 2026, involves the exposure of sensitive personal and health information maintained by the mental health services provider.

The compromised data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, Home Address, and Phone Number. These categories represent highly sensitive personal and medical details that, if misused, could lead to various forms of identity-related fraud or privacy violations.

Individuals who receive a notification letter from Park Place Behavioral Healthcare should take steps to protect themselves. It is recommended to carefully review any credit reports and financial statements for unusual activity. Consider placing a fraud alert or credit freeze on your credit files to prevent unauthorized accounts from being opened in your name.

Additionally, remain alert for unsolicited communications that may attempt to gather more personal information, as these could be phishing attempts. Changing passwords for online accounts, especially those linked to medical or financial services, is also a prudent measure. These general precautions are widely recommended to help mitigate risks following a data exposure.

This information is compiled from public regulatory filings and aims to provide factual details regarding the reported data breach. The investigation into the incident is currently listed as monitoring.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory