Three Oaks Hospice Reports Data Exposure Affecting Texas Patients

Three Oaks Hospice, Inc., a healthcare provider operating in Texas, reported a data breach to state authorities on September 21, 2026. The incident, which led to the exposure of patient data, is noted to have occurred on July 16, 2025. The specifics regarding the type of security incident were not detailed in the public filing, and an investigation into the matter is currently listed as monitoring.

The compromised information includes a comprehensive range of sensitive personal and medical data. Specifically, the exposed data types are Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Home Address, and Phone Number.

The exposure of such detailed medical and personal information carries substantial risks for affected individuals. This combination of data can facilitate medical identity theft, where fraudsters might use compromised credentials to obtain unauthorized medical services or fraudulently bill insurance providers. Additionally, the broader personal data increases vulnerability to various forms of fraud, targeted phishing schemes, and identity theft.

Individuals who receive an official notification from Three Oaks Hospice, Inc. are advised to take protective measures. This includes reviewing the notification letter carefully for specific guidance. It is generally recommended to place a fraud alert or security freeze on credit reports with the major credit bureaus. Furthermore, regularly monitor credit reports, financial statements, and explanation of benefits (EOB) statements from health insurers for any suspicious or unauthorized activity.

As a healthcare entity handling protected health information, Three Oaks Hospice, Inc. is subject to federal regulations such as the Health Insurance Portability and Accountability Act (HIPAA), which mandates specific safeguards for patient data.