Ellenville Regional Hospital Reports December 2025 Data Breach

Ellenville Regional Hospital, operating in Indiana, has officially reported a data breach incident that took place in December 2025. The public filing indicates that personal information was involved, though specific details about the nature of the breach or the types of data are not specified. This report serves to inform affected individuals about the situation and encourage vigilance regarding their personal data.

State: Indiana
Breach date: December 18, 2025
Reported: September 16, 2026

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Billing and Financial Account Details

Ellenville Regional Hospital, doing business as 3Westchester Ellenville Hospital, has filed a report concerning a data breach. The incident is noted to have occurred on December 18, 2025, affecting individuals associated with the Indiana-based facility.

The official filing does not specify the exact nature of the breach event or the precise categories of personal information that may have been exposed. Therefore, individuals should consider that their personal data may have been compromised, even without knowing the specific data types involved.

The report was submitted on September 16, 2026, and the investigation into the breach is currently listed as being in a 'monitoring' status. The filing also does not provide a specific number of individuals who may have been impacted by this security incident.

For those concerned their information may have been involved, it is prudent to take general protective measures. This includes regularly reviewing financial statements, credit reports, and account activity for any suspicious transactions or unauthorized access. Promptly report any unusual activity to the relevant financial institutions or service providers.

While the full scope of the breach remains under monitoring, maintaining vigilance over personal and financial accounts is a recommended step. This information is based on public filings and is intended to provide a factual record of the reported event.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Indiana Attorney General filing

Related data breach cases

Browse all Indiana data breaches View the full case directory