Franciscan Alliance Data Breach Exposes Patient and Employee Records
By Data Breach Law Group | Posted on February 20, 2026 · Indiana
Franciscan Alliance disclosed a data breach on February 20, 2026, exposing sensitive patient and employee data, including Full Name, Date of Birth, Social Security Number, and detailed medical and employment information. This incident creates significant long-term risks for affected individuals, including potential identity theft and medical fraud, prompting our investigation.
Our firm has initiated an investigation into a significant data breach recently reported by Franciscan Alliance, a healthcare and occupational health provider based in Indiana. The organization, operating through its Franciscan Working Well division, formally disclosed the security incident on February 20, 2026, stemming from an event identified on December 18, 2025. This breach affects highly sensitive personal and medical information entrusted to the alliance.
The compromised data set is extensive and includes critical personal identifiers and health details. According to the breach report, exposed categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Workers' Compensation Records, and Employer and Employment Details. This combination of medical and employment data presents severe, long-term risks for affected individuals, extending beyond typical financial fraud. Unlike credit card numbers, this deeply personal information cannot be easily changed, making victims vulnerable to medical identity theft, targeted phishing schemes, and fraudulent applications for years to come.
Franciscan Alliance, particularly its Working Well division, handles a dual role managing both clinical healthcare and occupational health, necessitating the meticulous handling of employee and patient records. Healthcare entities are legally bound by federal and state regulations, including HIPAA and Indiana’s security breach laws, to implement robust safeguards for electronic protected health information and personally identifiable information. The occurrence of a breach of this magnitude suggests that these mandatory security protocols may have been insufficient or potentially neglected, warranting a thorough legal examination.
If you received a data breach notification letter from Franciscan Alliance, it serves as official confirmation that your confidential records were part of this security incident. This notice establishes your legal standing to explore potential remedies. Our firm is actively reviewing claims on behalf of those impacted by this breach. We invite affected individuals to contact us for a free, no-obligation case review to understand your legal options. There are no upfront costs or fees unless we successfully recover compensation on your behalf.
Source: Indiana Attorney General breach notification record
If you were affected
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Did you receive a letter from Franciscan Alliance?
A case review is free and confidential. Tell us about your letter and we will explain your options.