Three Oaks Hospice Reports Data Breach to Texas Authorities

Three Oaks Hospice, Inc. filed a data breach report with Texas authorities on September 21, 2026, following an incident on July 16, 2025. The breach exposed sensitive personal and health information, including Full Name, Social Security Number, and medical details. Individuals affected by this incident should monitor for potential identity theft and medical fraud risks.

State: Texas
Breach date: July 16, 2025
Reported: September 21, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Home Address
Phone Number

Three Oaks Hospice, Inc., a healthcare provider specializing in end-of-life care in Texas, reported a data security incident to state regulators on September 21, 2026. This notification confirms that patient and employee data was compromised following an event on July 16, 2025. The company handles extensive personal and clinical documentation critical for its sensitive healthcare operations.

The reported breach exposed a range of highly sensitive personal and health data. This included individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Home Address, and Phone Number. These categories of information are commonly found in the comprehensive records maintained by healthcare providers like Three Oaks Hospice.

Exposure of these data types, especially when combined, carries significant risks. Compromised medical information can lead to medical identity theft, where unauthorized individuals might use stolen credentials for fraudulent medical services or to alter legitimate health records. The inclusion of Social Security Numbers and other identifiers also heightens the risk of financial fraud and identity theft beyond medical contexts.

As a healthcare entity, Three Oaks Hospice, Inc. is subject to strict regulations, including the Health Insurance Portability and Accountability Act (HIPAA) in addition to state data protection laws. HIPAA mandates safeguards for electronic protected health information. The filing of this breach report indicates that the organization identified a failure in maintaining the confidentiality, integrity, or security of this protected data.

Individuals who receive a breach notification from Three Oaks Hospice, Inc. should review it carefully for specific details about their exposed information. It is advisable to monitor credit reports for suspicious activity and review Explanation of Benefits (EOB) statements from insurers for unauthorized medical services. Activating any complimentary identity protection services offered by the company is also a recommended precaution.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Texas Attorney General filing

Related data breach cases

Browse all Texas data breaches View the full case directory