LifeTouch Health Data Breach Investigation
Arkansas Hospice Inc., doing business as LifeTouch Health, reported a network security incident in which certain information may have been accessed without authorization. The ongoing review identified a limited amount of protected health information as potentially involved, with the specific data varying by person. Strauss Borrelli PLLC is investigating the LifeTouch Health data incident and the rights of affected individuals. If you received a notice or believe your information was involved, you may fill out the secure contact form on this page to ask about potential claim eligibility.
Key Facts at a Glance
- Entity Involved: Arkansas Hospice Inc. d/b/a LifeTouch Health (Healthcare)
- Incident Type: Network disruption and reported unauthorized access
- Date of Incident: On or around March 12, 2026
- Discovery Date: Not disclosed
- Official Notice Date: May 11, 2026
- Exposed Information: Names, Social Security numbers, dates of birth, treatment information, and diagnoses may have been involved
- Affected Population: 38,629 individuals total
What Happened?
According to a consumer notice dated May 11, 2026, Arkansas Hospice Inc., doing business as LifeTouch Health, experienced a network disruption affecting certain systems on or around March 12, 2026. The company reported that its investigation found certain information stored on its network was subject to unauthorized access for a limited period. The notice did not state a specific cause of the event.
As of the notice, the review of potentially impacted data remained ongoing. The company reported that a limited amount of protected health information may have been accessed, but it had not yet determined every affected person or data category. The notice did not disclose a discovery date, the identity of any unauthorized actor, or the technical method used to gain access.
What Information Was Exposed?
The notice states that potentially impacted information varies by individual and may include names, Social Security numbers, dates of birth, treatment information, and diagnoses. These categories combine identity data with medical information, which may increase the risk of identity theft and healthcare-related fraud. Potential misuse can include fraudulent patient billing, medical identity theft, false insurance-verification calls, prescription-related inquiries, or phishing messages that appear to reference care. The notice did not say that every listed category was involved for every person, and its data review was still in progress. Individuals should rely on any personalized notice they receive to identify the categories attributed to them.
What Should You Do Next?
- Review and preserve the notice: Keep the envelope, email, and complete notice with your records. Confirm questions through LifeTouch Health’s published call center at 1-844-593-8437 rather than responding to an unsolicited message.
- Monitor medical and insurance records: Review explanation-of-benefits statements, patient portal activity, bills, prescription records, and insurance correspondence. Promptly question unfamiliar providers, treatments, claims, or charges.
- Check your credit reports: Obtain reports from all three nationwide credit bureaus through AnnualCreditReport.com. Look for unfamiliar accounts, addresses, credit inquiries, or collection activity.
- Consider a fraud alert or credit freeze: A fraud alert asks creditors to verify your identity, while a security freeze generally restricts access to your credit file. Contact Equifax, Experian, and TransUnion directly to evaluate these options.
- Watch for healthcare-themed scams: Be cautious of calls, emails, or texts requesting insurance credentials, Social Security numbers, payments, or prescription details. Verify requests using a provider or insurer’s official contact information.
Your Legal Rights
People whose information was involved may have rights under applicable state privacy, consumer-protection, breach-notification, medical-privacy, or other laws. Available rights depend on factors such as where the person lives, what information was affected, whether actual misuse occurred, and whether reasonable security and notification duties were followed. Potential recoverable losses, where permitted, may include documented out-of-pocket expenses, time spent responding to the incident, monitoring costs, or harm caused by identity misuse. Receiving a notice does not automatically establish a legal claim, and not receiving one does not necessarily establish that a person was unaffected while the review remains ongoing. Preserve notices, suspicious communications, bills, and related documentation.
Why Hire Strauss Borrelli PLLC?
A healthcare data incident can raise complicated questions about notification obligations, information security, medical identity theft, and available remedies. The firm can review the circumstances, evaluate whether an individual may have a claim, and explain possible next steps based on the applicable facts and law. A legal review can also help affected people identify useful records to preserve and distinguish documented losses from potential future risks. Submitting the secure contact form is a way to request an evaluation without assuming that a claim or recovery is guaranteed.
If you received a breach notification letter from Arkansas Hospice Inc. DBA LifeTouch Health:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
