Any-Time Home Care, Inc., a New York-based home care provider, experienced a criminal cyberattack on or about March 17, 2026. The incident led to unauthorized access to its information systems and the encryption of certain files. After an investigation, it was determined on or about April 13, 2026, that sensitive personal information was exposed. Preliminary notices were sent to affected individuals in April 2026, with formal letters mailed on July 21, 2026.
The breach affected an estimated 30,017 individuals in the United States. Exposed data types include names, addresses, Social Security numbers, dates of birth, health records, government identification information, and financial information. The specific details of the financial information exposed remain unclear. Two years of complimentary IDX identity-theft protection were reportedly offered to affected individuals.
Any-Time Home Care notified state authorities on July 21, 2026, including Massachusetts, New Hampshire, Indiana, and Vermont. While litigation has been filed, official government or company breach statements have not been independently verified. Further details may emerge as the matter progresses, and affected individuals should expect to receive notices regarding their specific exposure.