Open Arms Care Corporation Data Breach Exposes Sensitive Health and Personal Information
In August 2025, Tennessee-based Open Arms Care Corporation detected unusual activity in a company email account, triggering an investigation that revealed unauthorized access or acquisition of emails between June and August of that year. The breach potentially compromised a range of sensitive data, including names, Social Security numbers, medical diagnoses and treatment details, health insurance information, and, in limited cases, financial account details.
Operating 50 residential facilities for individuals with developmental and intellectual disabilities, Open Arms Care completed its assessment of affected individuals on April 30, 2026, and began sending notification letters to potentially impacted parties on June 9. The breach has drawn legal scrutiny, with attorneys investigating the possibility of a class action lawsuit on behalf of those affected, seeking compensation for privacy violations, time spent addressing the breach, and out-of-pocket costs.
The incident underscores ongoing risks to protected health and personal information within healthcare organizations. No further details on the breach’s origin or the number of affected individuals have been disclosed.
Source: https://www.classaction.org/data-breach-lawsuits/open-arms-care-corporation-june-2026
Open Arms Care cybersecurity rating report: https://www.rankiteo.com/company/open-arms-care
"id": "OPE1781303334",
"linkid": "open-arms-care",
"type": "Breach",
"date": "6/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Tennessee, USA',
'name': 'Open Arms Care Corporation',
'type': 'Healthcare Organization'}],
'attack_vector': 'Unauthorized email account access',
'customer_advisories': 'Notification letters sent to potentially impacted '
'parties on June 9, 2026',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Medical diagnoses and treatment '
'details',
'Health insurance information',
'Financial account details']},
'date_detected': '2025-08',
'date_publicly_disclosed': '2026-06-09',
'description': 'In August 2025, Tennessee-based Open Arms Care Corporation '
'detected unusual activity in a company email account, '
'triggering an investigation that revealed unauthorized access '
'or acquisition of emails between June and August of that '
'year. The breach potentially compromised a range of sensitive '
'data, including names, Social Security numbers, medical '
'diagnoses and treatment details, health insurance '
'information, and, in limited cases, financial account '
'details. The breach has drawn legal scrutiny, with attorneys '
'investigating the possibility of a class action lawsuit on '
'behalf of those affected, seeking compensation for privacy '
'violations, time spent addressing the breach, and '
'out-of-pocket costs.',
'impact': {'brand_reputation_impact': 'Legal scrutiny and potential class '
'action lawsuit',
'data_compromised': 'Sensitive health and personal information',
'identity_theft_risk': 'High (Social Security numbers, medical '
'diagnoses, health insurance information)',
'legal_liabilities': 'Potential class action lawsuit for privacy '
'violations, time spent addressing the '
'breach, and out-of-pocket costs',
'payment_information_risk': 'Limited (financial account details in '
'some cases)',
'systems_affected': 'Email accounts'},
'investigation_status': 'Completed assessment on April 30, 2026',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit',
'regulations_violated': ['HIPAA (potential)']},
'response': {'communication_strategy': 'Notification letters sent to '
'potentially impacted parties on June '
'9, 2026'},
'title': 'Open Arms Care Corporation Data Breach Exposes Sensitive Health and '
'Personal Information',
'type': 'Data Breach'}