Lake Region Healthcare, a community-owned, nonprofit rural health system, reported a data security incident in 2025 that may have involved personal and health-related information. Unauthorized access to its network was detected on or about May 19, 2025, and a review of the affected data concluded on June 5, 2026. The company began notifying affected individuals by U.S. Mail starting July 1, 2026.
Reported data elements exposed include names, dates of birth, Social Security numbers, financial information, health insurance information, contact information, medical record numbers, patient account numbers, medical/treatment information, and government-issued IDs. As of July 2026, at least 314 individuals have been confirmed as affected (294 in Texas, 20 in Massachusetts). The total number of impacted persons across all states has not yet been disclosed and remains unclear.
It is important to note that details about data breaches can emerge or change over time, and regulatory or legal investigations may occur. Notices to individuals may also be delayed.