Elara Caring Data Breach Exposes Sensitive Patient Information
Elara Caring, a major U.S. provider of home-based healthcare services, is under investigation following a data breach that exposed sensitive patient information. The incident, discovered on December 12, 2025, stemmed from unauthorized access to a third-party vendor’s systems between November 4–6 and November 14–17, 2025.
The breach compromised a range of personal and medical data, including medical records and Social Security numbers. While the attack was confined to the vendor’s systems, Elara Caring confirmed on March 12, 2026, that patient information was accessed. At least 714 Massachusetts residents were affected. In response, Elara Caring terminated its relationship with the vendor and is reviewing its security protocols.
The law firm Shamis & Gentile P.A. is investigating potential compensation claims for impacted individuals. Elara Caring, headquartered in Dallas, Texas, was formed in 2018 through the merger of Great Lakes Caring, National Home Health Care, and Jordan Health Services, offering services such as home health, hospice, and behavioral care.
Source: https://www.claimdepot.com/investigations/elara-caring-data-breach-2026
Elara Caring cybersecurity rating report: https://www.rankiteo.com/company/elara-caring
"id": "ELA1778691268",
"linkid": "elara-caring",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '714 Massachusetts residents',
'industry': 'Healthcare',
'location': 'Dallas, Texas, USA',
'name': 'Elara Caring',
'size': 'Major U.S. provider',
'type': 'Healthcare Provider'}],
'attack_vector': 'Third-party vendor compromise',
'data_breach': {'personally_identifiable_information': 'Social Security '
'numbers, medical '
'records',
'sensitivity_of_data': 'High (medical records, Social '
'Security numbers)',
'type_of_data_compromised': 'Personal and medical data'},
'date_detected': '2025-12-12',
'date_publicly_disclosed': '2026-03-12',
'description': 'Elara Caring, a major U.S. provider of home-based healthcare '
'services, is under investigation following a data breach that '
'exposed sensitive patient information. The incident stemmed '
'from unauthorized access to a third-party vendor’s systems, '
'compromising personal and medical data, including medical '
'records and Social Security numbers.',
'impact': {'data_compromised': 'Medical records, Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential compensation claims',
'systems_affected': 'Third-party vendor systems'},
'investigation_status': 'Under investigation',
'post_incident_analysis': {'corrective_actions': 'Terminated vendor '
'relationship, reviewing '
'security protocols',
'root_causes': 'Unauthorized access to third-party '
'vendor systems'},
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Potential compensation claims'},
'response': {'containment_measures': 'Terminated relationship with the vendor',
'remediation_measures': 'Reviewing security protocols',
'third_party_assistance': 'Shamis & Gentile P.A. (law firm '
'investigating compensation claims)'},
'title': 'Elara Caring Data Breach Exposes Sensitive Patient Information',
'type': 'Data Breach'}