240 Data Breach Exposes Sensitive Patient Records in Indiana

240, a digital health and wellness software provider central to healthcare operations in Indiana, recently confirmed a significant cybersecurity incident. The breach, which initially occurred on June 17, 2025, was formally reported on February 18, 2026, impacting its systems that manage extensive patient and consumer data.

The compromised data includes highly personal details such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. The exposure of such a comprehensive set of identifying and health-related data creates substantial, long-term risks for fraud, identity theft, and medical scams targeting victims.

As a company entrusted with protected health information, 240 was legally bound by strict regulations, including the Health Insurance Portability and Accountability Act (HIPAA) and Indiana's data security laws. The occurrence of a data breach of this magnitude suggests that the company may have failed to uphold its duty to implement adequate security measures, leaving sensitive data vulnerable to unauthorized access and exploitation.

If you received a data breach notification letter from 240 in Indiana, it confirms your personal and health information was compromised due to this security lapse. This notification establishes your eligibility to seek justice and potential compensation through a legal claim, even if you haven't yet experienced direct financial loss or identity theft.

Our dedicated legal team is actively investigating the 240 data breach and offers free, confidential case reviews to help affected individuals understand their legal options. We handle these claims on a contingency fee basis, meaning you pay nothing upfront, and we only get paid if we successfully recover compensation on your behalf.