Where does the WindRose Health Network case file come from?

Every entry is taken from the breach report WindRose Health Network lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: WindRose Health Network Data Breach

This file collects the dated facts on record for the WindRose Health Network incident. The state report is dated January 27, 2026. The incident itself is dated August 22, 2025.

Timeline

158 days separate the incident date from the date it was reported.

August 22, 2025Incident dateWhen the filing says the breach took place.
January 27, 2026Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: January 27, 2026
Incident date: August 22, 2025
Receiving office: Indiana Attorney General

Case notes

WindRose Health Network, based in Indiana, has submitted a formal data breach notification concerning a security incident involving personal information. This official filing was made on January 27, 2026, indicating a reported event.

The reported breach date is August 22, 2025. Public records indicate that the incident is currently under investigation, meaning the full scope and nature of the compromise are still being determined. Specific categories of information reportedly involved are not detailed in the available documentation.

Individuals who receive direct communication from WindRose Health Network regarding this incident should carefully review the contents. These notices are intended to provide comprehensive information relevant to their situation, including any specifics about what information may have been involved in the breach.

As a general measure, it is advisable for individuals to maintain heightened awareness of their personal accounts and records. Monitoring for any suspicious activity or unexpected communications is a recommended practice to help safeguard against potential misuse of information.

Further details, such as the exact number of individuals affected or the technical specifics of the breach, were not specified in the public record at the time of the filing. Additional information may be provided by WindRose Health Network as their internal investigation proceeds.

Questions about this case file

Where does the WindRose Health Network case file come from?: Every entry is taken from the breach report WindRose Health Network lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the WindRose Health Network breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files