Lymphedema Therapy Specialists and Inc.: Lymphedema Therapy Specialists Data Breach Lawsuit Investigation

Lymphedema Therapy Specialists Hit by INC RANSOM in Data Breach Affecting 378 Texans

Houston-based Lymphedema Therapy Specialists, Inc., a faith-based outpatient medical practice, suffered a ransomware attack by the cybercriminal group INC RANSOM, leading to the exposure of sensitive patient data. The breach was first disclosed on the dark web on February 27, 2026, and later reported to the Texas Attorney General the same day.

The attack compromised the personal and medical information of at least 378 individuals in Texas, including:

• Names
• Social Security numbers
• Government-issued ID numbers (passport, state ID)
• Medical records

Affected individuals were notified via U.S. Mail, and the law firm Shamis & Gentile P.A. is investigating potential legal claims for compensation on behalf of victims. The incident underscores the growing threat of ransomware targeting healthcare providers and the risks of exposed personally identifiable information (PII).

Source: https://www.claimdepot.com/investigations/lymphedema-therapy-specialists-data-breach-2026

Lymphedema Therapy Specialists | Lymphedema Clinic cybersecurity rating report: https://www.rankiteo.com/company/lymphedema-therapy-specialists-lymphedema-clinic

"id": "LYM1772239615",
"linkid": "lymphedema-therapy-specialists-lymphedema-clinic",
"type": "Ransomware",
"date": "2/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '378',
                        'industry': 'Healthcare',
                        'location': 'Houston, Texas, USA',
                        'name': 'Lymphedema Therapy Specialists, Inc.',
                        'type': 'Healthcare Provider'}],
 'customer_advisories': 'U.S. Mail notifications to affected individuals',
 'data_breach': {'number_of_records_exposed': '378',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              'Government-issued ID numbers',
                                              'Medical records']},
 'date_publicly_disclosed': '2026-02-27',
 'description': 'Houston-based Lymphedema Therapy Specialists, Inc., a '
                'faith-based outpatient medical practice, suffered a '
                'ransomware attack by the cybercriminal group INC RANSOM, '
                'leading to the exposure of sensitive patient data. The breach '
                'compromised personal and medical information of at least 378 '
                'individuals in Texas.',
 'impact': {'data_compromised': 'Personal and medical information',
            'identity_theft_risk': 'High'},
 'ransomware': {'data_exfiltration': 'Yes'},
 'references': [{'source': 'Texas Attorney General'},
                {'date_accessed': '2026-02-27', 'source': 'Dark Web'}],
 'regulatory_compliance': {'legal_actions': 'Potential legal claims for '
                                            'compensation',
                           'regulatory_notifications': 'Reported to Texas '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'U.S. Mail notifications to affected '
                                        'individuals',
              'third_party_assistance': 'Shamis & Gentile P.A. (law firm)'},
 'threat_actor': 'INC RANSOM',
 'title': 'Lymphedema Therapy Specialists Hit by INC RANSOM in Data Breach '
          'Affecting 378 Texans',
 'type': 'ransomware'}