Elmwood Healthcare Data Breach Exposes Sensitive Patient Information Elmwood Healthcare, a provider of home-based medical services operating in Rhode Island and Massachusetts, has confirmed a data breach involving unauthorized access to its systems. Between January 24 and February 13, 2026, an unknown party accessed and potentially exfiltrated files containing sensitive patient data. The exposed information may include names, Social Security numbers, dates of birth, medical details, health insurance policy numbers, and other demographic data. Elmwood Healthcare is currently conducting a review to determine the full scope of affected individuals, with written notifications to be sent once the investigation concludes. The breach was detected after the company identified suspicious activity, prompting an investigation with third-party cybersecurity experts. While the exact number of impacted individuals remains unconfirmed, legal professionals are exploring potential class action lawsuits on behalf of those affected, citing possible damages such as loss of privacy, financial costs, and time spent mitigating the breach. Elmwood Healthcare operates five practices across Rhode Island and Massachusetts, serving patients in home-based care settings. The incident underscores ongoing risks to healthcare data security, with legal and regulatory implications still developing.