Adams Health Network Reports Data Breach Affecting 5,305 Patients Adams Health Network, which operates Adams Memorial Hospital in Decatur, Indiana, disclosed a data breach impacting 5,305 individuals in the U.S. The incident stemmed from a phishing attack on December 22, 2025, in which an employee’s email account was compromised after interacting with a fraudulent link. The breach went undetected for nearly three months until March 12, 2026, when unauthorized access was identified. An investigation revealed that the compromised account contained sensitive patient data, including names, addresses, dates of birth, Social Security numbers, medical diagnoses, insurance details, and dates of service. Adams Health Network reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights on May 11, 2026, and began notifying affected patients the same month. The organization is offering 12 months of free credit monitoring through CyberScout (a TransUnion company) to help detect potential identity theft or fraudulent activity. Patients were also advised to monitor their healthcare accounts for suspicious activity. The breach exposed both personally identifiable information (PII) and protected health information (PHI), raising concerns about potential misuse. Adams Health Network has set up a dedicated call center for affected individuals seeking further details.

Adams Health Network, which runs Adams Memorial Hospital, had faced ransomware attack which targeted some of its computer servers. Adams Health Network neither disclosed the ransom amount nor whether it complied. Functioning of the hospital was affected. AHN experienced a business interruption throughout the weekend as they worked to restore the affected severs. Doctors had later gained access to scheduling however it is unclear if access to patient history has been restored. There were no letters sent to patients notifying them of the breach as they believe no patient's files had been accessed.