Arkansas Hospice Inc., operating as LifeTouch Health, notified the Vermont Attorney General in October 2026 of a data breach exposing Social Security numbers, government ID numbers, financial account data, and health records. The number of people affected has not been publicly disclosed. Affected individuals should place a credit freeze and monitor both credit reports and insurance statements closely.
| Company | LifeTouch Health |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Information, Health Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the LifeTouch Health Data Breach?
Arkansas Hospice Inc., which does business as LifeTouch Health, has filed a formal data breach notification confirming that sensitive personal information belonging to patients and others was compromised. The filing, submitted to the Vermont Attorney General in October 2026, confirms that unauthorized parties gained access to data the organization maintained. As a hospice and health care provider, LifeTouch Health holds some of the most sensitive categories of personal and medical information that exist.
The exact date the intrusion began has not been publicly disclosed. However, the organization’s notification confirms that someone accessed systems containing highly sensitive records. Because hospice providers manage patient intake forms, billing systems, and insurance documentation, a breach of this kind often means attackers obtained a wide mix of identity and medical details in a single event.
Following discovery of the incident, LifeTouch Health appears to have conducted an internal review before notifying regulators. This process typically involves forensic specialists who work to determine which files were accessed and which individuals were affected. As a result, the formal notification to Vermont’s Attorney General in October 2026 represents the organization’s official acknowledgment that personal data was exposed.
Who was affected?
The individuals affected by the LifeTouch Health data breach likely include current and former hospice patients, along with their family members or authorized representatives listed in care records. Because hospice services often involve coordination with insurance providers and government health programs, affected individuals could include people across multiple states, not only Arkansas residents.
The exact number of people affected has not been publicly disclosed. Health care breaches of this nature frequently affect vulnerable populations, including elderly patients and their families. In addition, because hospice records often include details about caregivers or next of kin, people who were never direct patients could also find their information involved.
What Information Was Potentially Exposed?
According to the breach notification, several categories of highly sensitive personal data were involved in this incident. This combination of identity and medical information creates significant risk for anyone affected.
- Social Security numbers
- Government ID numbers
- Financial account codes
- Credit and debit account information
- Health records
This type of exposure creates serious risk of identity theft. Because Social Security numbers and government ID numbers were involved, criminals could use this data to open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Unlike a stolen credit card, a compromised Social Security number cannot simply be replaced, which means the risk can persist for years.
In addition, the exposure of health records raises the possibility of medical identity theft. Fraudsters can use stolen health information to submit fake insurance claims or obtain medical services under someone else’s identity. This can lead to inaccurate medical records, billing disputes, and complications with future insurance coverage. Because financial account and payment card data were also involved, affected individuals should watch closely for unauthorized charges as well.
What is the company doing?
LifeTouch Health has taken the step of formally notifying regulators about the breach, which indicates the organization has acknowledged the incident and is working through its legal obligations. Filing this type of notification typically follows an internal assessment of which systems were compromised and which individuals need to be notified directly.
In addition to the Vermont filing, the company also submitted formal notification with the Vermont Attorney General, as required under state breach notification laws. Organizations that file these notices generally also notify affected individuals directly by mail, and many offer complimentary credit monitoring or identity protection services following a breach involving Social Security numbers and health data. Affected individuals should watch for a direct notification letter describing any protective services being offered.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should request copies of their credit reports from all three major credit bureaus and review them carefully. Look for unfamiliar accounts, inquiries, or loans that you did not open. Because Social Security numbers were involved in this breach, new account fraud is a realistic concern.
You can obtain a free credit report weekly from each bureau through AnnualCreditReport.com. As a result, checking your reports on a rotating basis throughout the year can help you catch suspicious activity early. If you notice anything unusual, report it to the credit bureau immediately.
Consider a Credit Freeze or Fraud Alert
Because this breach involved Social Security numbers and government ID numbers, placing a credit freeze with each of the three credit bureaus is a strong protective step. A freeze prevents new creditors from accessing your credit file, which makes it much harder for criminals to open accounts in your name.
Alternatively, a fraud alert requires lenders to take extra verification steps before approving credit in your name. This option is less restrictive than a freeze but still offers meaningful protection. Either option is free to set up and can be lifted later when needed.
Protect Against Medical Identity Theft
Because health records were exposed in this breach, affected individuals should request and review an Explanation of Benefits statement from their health insurer. This document lists services billed under your name, which can reveal fraudulent claims early.
In addition, consider requesting a copy of your medical records to confirm there are no unfamiliar diagnoses or treatments listed. If you notice anything suspicious, report it to your insurer and the health care provider right away. Catching medical fraud early can prevent long-term complications with your coverage and care.
Stay Alert for Phishing Attempts
Scammers often use breached information to craft convincing phishing emails, texts, or phone calls. Because this breach involved detailed personal information, criminals may reference real account details to appear legitimate. Be cautious of any message asking you to confirm personal data or click a link unexpectedly.
Never provide sensitive information in response to an unsolicited message. Instead, contact the organization directly using a verified phone number or website. This simple habit can prevent a secondary breach of your personal accounts.
Consult a Data Breach Attorney
Given the sensitivity of the information involved, affected individuals may want to speak with an attorney who focuses on data breach cases. An attorney can help determine whether you qualify for compensation through a class action or individual claim.
Many data breach attorneys offer free initial case evaluations, which means there is little risk in exploring your options. This step can also help you understand your rights under state and federal privacy laws.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General