Three Oaks Hospice of El Paso Reports Data Breach Affecting Patients

Three Oaks Hospice of El Paso, a healthcare provider operating in Texas, formally reported a data security incident to the Texas Attorney General on September 21, 2026. This filing indicated that an incident occurring on July 16, 2025, led to the exposure of confidential information. The specific nature or type of the breach was unspecified in the public record.

The information reported as compromised includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Home Address, Phone Number, and Emergency Contact Details. This extensive list encompasses both personally identifiable information and protected health information, reflecting the comprehensive records maintained by hospice care providers.

Such a broad exposure of sensitive personal and medical data creates notable risks for affected individuals. Compromised medical details, like Medical Record Number and Diagnosis and Treatment Information, could potentially be exploited for medical identity theft, where fraudulent services or prescriptions are sought using another person's identity. The exposure of core identifiers, such as Social Security Number and Date of Birth, also presents a risk for various forms of financial fraud or identity theft.

Individuals who receive an official data breach notification from Three Oaks Hospice of El Paso should take immediate steps to safeguard their information. It is advisable to carefully review explanation of benefits (EOB) statements from health insurers for any unfamiliar medical services or claims. Monitoring credit reports for suspicious activity is also a crucial precaution.

Consider placing a fraud alert or security freeze on your credit files with the major credit bureaus (Equifax, Experian, TransUnion) to help prevent new accounts from being opened in your name without your consent. Additionally, remain vigilant for any unsolicited communications, particularly those that request personal information. Regularly changing passwords for online accounts, especially those linked to healthcare or financial services, is also recommended to mitigate potential risks.