Adams County Memorial Hospital Hit by Phishing Attack, Exposing Patient Data Adams County Memorial Hospital, a 25-bed critical access facility in Decatur, Indiana, is under investigation following a data breach that exposed sensitive patient information. The incident stemmed from a phishing attack on December 22, 2025, targeting an employee’s email account. Adams Health Network, the hospital’s parent organization, detected the compromise on March 12, 2026, and took immediate steps to secure the account. An investigation revealed that the breached email contained personally identifiable information (PII) of 5,305 individuals, including names, addresses, dates of birth, Social Security numbers, medical diagnoses, insurance details, and financial data. The hospital reported the breach to the U.S. Department of Health and Human Services on May 11, 2026. While there is no evidence that the attackers specifically sought patient data or that the information has been misused, the hospital is offering affected individuals 12 months of free credit monitoring through CyberScout, a TransUnion company. Legal firms are now reviewing potential compensation claims for those impacted.