What Happened in the Elmwood Home Care Data Breach?
Elmwood Home Care, a Medicare-certified home health provider serving patients in Rhode Island and Massachusetts, has confirmed a data breach tied to a ransomware attack on its computer systems. The Elmwood Home Care data breach involved unauthorized access to the company’s network over several weeks in early 2026. As a result, sensitive patient and personal information may have been viewed or copied by an outside attacker.
According to the company, an unauthorized actor accessed certain systems within its network between Jan. 24 and Feb. 13, 2026. Elmwood Home Care first became aware of suspicious activity in its environment and moved quickly to launch an internal review. Because the situation involved potential unauthorized access to sensitive files, the organization brought in third-party cybersecurity specialists to assist with the investigation.
On March 8, 2026, a ransomware group calling itself LockBit 5.0 claimed responsibility for the attack on a dark web forum. The group stated it had obtained the organization’s data and threatened to publish it within 12 to 13 days. This claim added urgency to Elmwood Home Care’s ongoing forensic investigation.
Following this discovery, the company began a detailed review of the potentially affected data. This process aims to determine exactly what information was compromised and which individuals were impacted. As of the latest update, Elmwood Home Care has stated that this investigation and data review remains ongoing.
Who was affected?
The Elmwood Home Care data breach may affect current and former patients who received home health services through the organization. Because Elmwood Home Care operates as a Medicare-certified provider, the affected population likely includes older adults and individuals receiving in-home medical care. This population can be especially vulnerable to identity theft and scams.
At this time, the total number of individuals affected across the United States has not been publicly disclosed. However, Elmwood Home Care did report the incident to both the Massachusetts Attorney General and the Vermont Attorney General on June 10, 2026. This suggests residents in multiple states may be impacted, not just those in Rhode Island and Massachusetts where the company primarily operates.
Because the compromised systems held medical and demographic records, the exposed population most likely includes patients rather than employees. In addition, given the sensitive nature of home health care, some affected individuals may be homebound, elderly, or otherwise dependent on caregivers. This makes timely notification and support especially important for this group.
What Information Was Potentially Exposed?
The specific data exposed in the Elmwood Home Care data breach may vary from person to person. However, the company has confirmed that several categories of sensitive information were involved in the incident.
- Full names
- Social Security numbers
- Dates of birth
- Driver’s license numbers
- Other demographic details
- Medical information
- Health insurance policy numbers
This combination of data is particularly concerning because it includes both financial identifiers and protected health information. As a result, affected individuals face risk on multiple fronts. For example, a stolen Social Security number combined with a date of birth can allow criminals to open new credit accounts or file fraudulent tax returns in a victim’s name.
In addition, exposed medical information and health insurance policy numbers can enable medical identity theft. This occurs when someone uses a victim’s insurance details to receive treatment, obtain prescriptions, or submit fraudulent medical claims. Because these fraudulent claims can appear on a real patient’s record, they may also create confusion or errors that affect future medical care.
What is the company doing?
In response to the breach, Elmwood Home Care says it is reviewing its existing policies and procedures. The organization is also implementing additional administrative and technical safeguards to help better protect the information in its care going forward.
Elmwood Home Care has stated it will provide affected individuals with more information as the investigation continues. This includes notification by mail or through secure online posting. Meanwhile, the company has set up a dedicated phone line and email address so that potentially affected individuals can ask questions about the incident.
The company has also urged people to remain alert. Specifically, Elmwood Home Care recommends reviewing account statements, free credit reports, and explanations of benefits for any unusual activity or billing errors. If something looks wrong, the company advises reporting it promptly to the relevant credit card company, bank, health care provider, or insurance company.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Anyone potentially affected by the Elmwood Home Care data breach should start by requesting a free copy of their credit report. All three major credit bureaus allow consumers to check their reports for suspicious activity. Because Social Security numbers were involved, this step is especially important.
When reviewing your report, look for unfamiliar accounts, hard inquiries you didn’t authorize, or addresses you don’t recognize. If you spot anything unusual, dispute it right away with the credit bureau. Consider checking your reports every few months for the next year, since stolen data is sometimes used well after a breach occurs.
Consider a Credit Freeze or Fraud Alert
Because Social Security numbers and driver’s license numbers were exposed, placing a credit freeze can offer strong protection. A freeze blocks lenders from accessing your credit file, which makes it much harder for criminals to open new accounts in your name. This is one of the most effective tools available to consumers after a breach like this one.
Alternatively, you can place a fraud alert, which requires creditors to verify your identity before extending new credit. Fraud alerts are free and typically last one year, though they can be renewed. Either option can help reduce the chances of someone successfully misusing your stolen information.
Watch for Medical Identity Theft
Since medical information and health insurance policy numbers were exposed, affected individuals should carefully review any explanation of benefits statements they receive. Look for services or treatments you don’t recognize. If something seems off, contact your health insurance provider immediately to report the discrepancy.
In addition, request a copy of your medical records periodically to check for inaccuracies. Medical identity theft can be harder to detect than financial fraud because it doesn’t always show up on a credit report. As a result, staying proactive with your health insurance and provider communications is essential.
Stay Alert for Phishing Attempts
After a breach involving personal and medical data, scammers often follow up with phishing emails, calls, or text messages. These messages may pretend to be from Elmwood Home Care, a bank, or a healthcare provider. Because the attackers may already have real personal details, these scams can appear convincing.
Never click on links or share personal information in response to unsolicited messages. Instead, contact the organization directly using a verified phone number or website. If you believe you’ve received a phishing attempt related to this breach, report it and avoid engaging further.
Consult a Data Breach Attorney
Given the sensitive nature of the information exposed, affected individuals may want to speak with a data breach attorney. An attorney can help evaluate whether you qualify for compensation related to the Elmwood Home Care data breach. Many offer free consultations to review your specific situation.
Because class action lawsuits sometimes follow large healthcare data breaches, it’s worth understanding your legal options early. An attorney can also help you navigate identity theft recovery if you experience fraud linked to this incident. Acting sooner rather than later may help preserve your ability to pursue a claim.