Breaches and incidents
Three Oaks Hospice / Elevation Hospice and affiliates: email breach found in 2025 notified over a year later, 36,622 affected
HIPAA Journal reports the Dallas hospice operator identified unauthorized access to its email environment on 8 Aug 2025.
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- HIPAA Journal reports the Dallas hospice operator identified unauthorized access to its email environment on 8 Aug 2025; affiliated hospices (Agape Hospice Care, Elevation Hospice of Colorado, Sage Hospice of Arizona) were told on 17 Aug 2026 and individuals on 17 Sep 2026. HHS OCR lists 36,622 affected; data includes SSNs, driver’s license, medical and insurance information.
- Root cause: unauthorized access to email accounts; method not disclosed.
- No attacker named.
- Cybersecurity experts assisted.