PalmFlex Inc Confirms Data Breach Affecting Indiana Residents

PalmFlex Inc in Indiana officially reported a data security incident on July 22, 2026, stemming from an event on April 2, 2026. This breach exposed a range of highly sensitive personal and financial data, potentially placing affected individuals at risk of various forms of identity theft and financial fraud.

State: Indiana
Breach date: April 2, 2026
Reported: July 22, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Mailing Address
Health Insurance ID Number
Diagnosis and Treatment Information
Provider and Treatment Dates
Financial Account Number

PalmFlex Inc, based in Indiana, reported a data breach to state regulators on July 22, 2026. The company stated the incident occurred on April 2, 2026, though the specific method or type of breach has not been publicly detailed in official filings. This notification serves to inform individuals that their personal information may have been compromised.

The exposed data categories from the PalmFlex Inc incident include Full Name, Date of Birth, Social Security Number, Mailing Address, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, and Financial Account Number. These details are derived directly from the information provided in the regulatory filings.

The compromise of such a broad spectrum of sensitive information presents significant risks for affected individuals. Bad actors could use Social Security Numbers and Dates of Birth to commit identity theft, open fraudulent accounts, or apply for credit. Additionally, the exposure of Health Insurance ID Numbers, Diagnosis and Treatment Information, and Provider and Treatment Dates can lead to medical identity theft, where individuals' healthcare benefits are misused, potentially corrupting their medical records.

Individuals who believe they may be affected by this breach should take proactive steps to safeguard their information. It is advisable to regularly review financial statements and Explanation of Benefits (EOB) from their health insurance provider for any unauthorized activity. Placing a fraud alert or security freeze on credit reports with the major credit bureaus (Equifax, Experian, and TransUnion) can also help prevent unauthorized access to new credit.

Maintaining vigilance over personal and financial accounts is crucial following a data breach involving this type of sensitive data. All information regarding this incident, including the reported data types and dates, comes from official public filings with state regulators.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory