Where does the HealthStream Inc case file come from?

Every entry is taken from the breach report HealthStream Inc lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: HealthStream Inc Data Breach

This file collects the dated facts on record for the HealthStream Inc incident. The state report is dated September 14, 2026. The incident itself is dated July 16, 2026.

Timeline

60 days separate the incident date from the date it was reported.

July 16, 2026Incident dateWhen the filing says the breach took place.
September 14, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: September 14, 2026
Incident date: July 16, 2026
Receiving office: Indiana Attorney General

Case notes

HealthStream Inc, an entity based in Indiana, officially reported a data breach to regulatory authorities on September 14, 2026. This notification stems from an incident that occurred on July 16, 2026, which potentially compromised sensitive personal information.

The details provided in the public filing indicate that personal information was involved in this security event. However, the specific categories of data that may have been accessed or exposed have not been detailed in the official disclosure documents. Affected individuals are advised to understand that the scope of the compromised information remains broadly defined in the current records.

The nature of how the breach occurred remains unspecified in the available public records. As of the filing date, the incident is under a status of "monitoring," suggesting ongoing assessment or observation related to the security event and its potential impact.

For individuals who receive direct notification from HealthStream Inc, it is important to take proactive steps. This includes regularly reviewing all financial statements and credit reports for any unauthorized activity. Additionally, individuals should exercise caution with any unsolicited communications, particularly those requesting personal details, as these could be phishing attempts.

Questions about this case file

Where does the HealthStream Inc case file come from?: Every entry is taken from the breach report HealthStream Inc lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the HealthStream Inc breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files