Elmwood Healthcare Data Breach Exposes Sensitive Patient Information
Elmwood Healthcare, a provider of home-based medical services operating in Rhode Island and Massachusetts, has confirmed a data breach involving unauthorized access to its systems. Between January 24 and February 13, 2026, an unknown party accessed and potentially exfiltrated files containing sensitive patient data.
The exposed information may include names, Social Security numbers, dates of birth, medical details, health insurance policy numbers, and other demographic data. Elmwood Healthcare is currently conducting a review to determine the full scope of affected individuals, with written notifications to be sent once the investigation concludes.
The breach was detected after the company identified suspicious activity, prompting an investigation with third-party cybersecurity experts. While the exact number of impacted individuals remains unconfirmed, legal professionals are exploring potential class action lawsuits on behalf of those affected, citing possible damages such as loss of privacy, financial costs, and time spent mitigating the breach.
Elmwood Healthcare operates five practices across Rhode Island and Massachusetts, serving patients in home-based care settings. The incident underscores ongoing risks to healthcare data security, with legal and regulatory implications still developing.
Source: https://www.classaction.org/data-breach-lawsuits/elmwood-healthcare-april-2026
Elmwood Healthcare cybersecurity rating report: https://www.rankiteo.com/company/elmwood-healthcare
"id": "ELM1776724835",
"linkid": "elmwood-healthcare",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Rhode Island and Massachusetts, USA',
'name': 'Elmwood Healthcare',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Written notifications to be sent once investigation '
'concludes',
'data_breach': {'data_exfiltration': 'Potential',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Dates of birth',
'Medical details',
'Health insurance policy numbers',
'Other demographic data']},
'date_detected': '2026-02-13',
'description': 'Elmwood Healthcare, a provider of home-based medical services '
'operating in Rhode Island and Massachusetts, has confirmed a '
'data breach involving unauthorized access to its systems. '
'Between January 24 and February 13, 2026, an unknown party '
'accessed and potentially exfiltrated files containing '
'sensitive patient data. The exposed information may include '
'names, Social Security numbers, dates of birth, medical '
'details, health insurance policy numbers, and other '
'demographic data.',
'impact': {'data_compromised': 'Sensitive patient data including names, '
'Social Security numbers, dates of birth, '
'medical details, health insurance policy '
'numbers, and other demographic data',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuits'},
'investigation_status': 'Ongoing',
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuits'},
'response': {'communication_strategy': 'Written notifications to affected '
'individuals',
'third_party_assistance': 'Third-party cybersecurity experts'},
'title': 'Elmwood Healthcare Data Breach Exposes Sensitive Patient '
'Information',
'type': 'Data Breach'}