Community Alternatives Unlimited Data Breach Exposes Sensitive Patient Data

Community Alternatives Unlimited, an Indiana-based organization providing critical care and support services, reported a significant data breach to state authorities on August 26, 2026. This incident, which occurred on or about March 5, 2026, involved unauthorized access to systems holding deeply sensitive personal, medical, and financial records entrusted to the organization.

The compromised data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Financial Account Details. Such a comprehensive exposure from an organization handling care coordination and government support for vulnerable individuals means victims face severe, long-term risks.

Exposure of medical record numbers and diagnosis information can lead to medical identity theft, where criminals use stolen identities to obtain prescriptions or bill for services. Concurrently, the compromise of Social Security Numbers and financial account details immediately threatens financial account takeover, fraudulent credit applications, and tax fraud. Monitoring financial statements and credit reports is crucial.

As a provider of healthcare and social services, Community Alternatives Unlimited was legally bound by strict regulations, including HIPAA and Indiana’s data protection laws, to safeguard this confidential information. These laws mandate robust security measures to prevent unauthorized access. The occurrence of this breach suggests potential lapses in these critical protections.

Receiving a data breach notification letter from Community Alternatives Unlimited means your private information was likely exposed due to this incident. Our team is actively investigating the circumstances of this breach and the organization's adherence to its legal duties. If you received a letter, you may have legal rights to pursue compensation for the risks and harm you now face.

There is no cost to discuss your situation with our team, and we only get paid if we achieve a recovery on your behalf. Understanding your options is the first step toward protecting yourself and holding responsible parties accountable.