WorldOne Inc dba Sermo Reports 2026 Data Security Incident

WorldOne Inc, operating as Sermo, filed a data breach report in Indiana in February 2026 after its network was compromised on March 19, 2024. This incident potentially exposed sensitive professional and financial information of its users, primarily healthcare professionals. Individuals who received a notification about this breach should review official details to understand the specific data categories affected.

State: Indiana
Breach date: March 19, 2024
Reported: February 9, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Professional License Number
Financial Account Details
Tax Identification Number
Email Address
Professional Credentials and Verification Records

WorldOne Inc, known for its Sermo platform, formally reported a data security incident to Indiana officials on February 9, 2026. The company identified a network compromise that occurred on March 19, 2024. Sermo is a specialized digital platform and online community primarily used by physicians and healthcare professionals for collaboration and professional activities.

Public filings indicate the security incident involved the potential exposure of multiple categories of sensitive personal data. These reported categories include Full Name, Date of Birth, Social Security Number, Professional License Number, Financial Account Details, Tax Identification Number, Email Address, and Professional Credentials and Verification Records.

Such information, particularly when combined, carries significant risks for affected individuals. The exposure of professional details alongside financial identifiers could increase vulnerability to various forms of identity theft, financial fraud, and targeted phishing attempts. Healthcare professionals relying on platforms like Sermo are advised to remain vigilant regarding their personal and financial security.

Individuals who received a notification letter from WorldOne Inc dba Sermo are encouraged to carefully review that communication for specific details. As a general protective measure, it is advisable to monitor financial statements and credit reports for any unusual activity. Changing passwords for online accounts, especially those related to professional and financial services, is also a recommended step. Being cautious of unsolicited communications that ask for personal information can help prevent further compromise.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Replace exposed ID documents
Contact your state DMV or the issuing agency about replacing an exposed driver's license, passport, or government ID number.
Secure your online accounts
Change the password on any account that reused an exposed password and turn on two-factor authentication wherever it's offered.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory