RansomwareLawGroup.com

> Cause not stated in filing

Arkansas Hospice Inc. d/b/a LifeTouch Health data breach investigation

Arkansas Hospice Inc., operating as LifeTouch Health, reported a data breach to the Vermont Attorney General on October 13, 2026. This incident exposed sensitive patient information, including Social Security Numbers and medical records, creating serious risks for affected individuals.

Filed
October 13, 2026
Regulator
Vermont AG
People affected
Not stated
File status
Monitoring

What the filing confirms

  • Arkansas Hospice Inc. d/b/a LifeTouch Health reported the incident to the Vermont Attorney General.
  • Information involved: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, Billing and Claims Information, Home Address, Phone Number.

Still unknown

  • How many people were affected. The filing does not give a number.
  • What caused the incident beyond the description in the filing.
  • How the attackers got in, and whether basic safeguards such as multi-factor sign-in were in place.
Read the filing at the source

Investigation notes

Arkansas Hospice Inc., doing business as LifeTouch Health, a healthcare provider specializing in comprehensive patient services, has confirmed a data security incident affecting individuals in Vermont. The company formally reported the breach to the Vermont Attorney General on October 13, 2026, initiating an investigation into the circumstances and full impact of the data compromise.

The official filing indicates that a broad spectrum of highly sensitive personal and medical data was exposed. This includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, Billing and Claims Information, Home Address, and Phone Number. Such a comprehensive data set presents significant and lasting risks to those affected.

The exposure of this type of immutable information—like Social Security Numbers and detailed medical histories—creates far-reaching consequences. Affected individuals face a heightened risk of medical identity theft, where unauthorized parties could use their insurance or medical records for fraudulent treatments. They are also more vulnerable to financial fraud, targeted scams, and other forms of identity-related harm.

As a healthcare entity handling protected health information, LifeTouch Health is legally obligated to adhere to strict federal and state data security regulations, including the Health Insurance Portability and Accountability Act (HIPAA). The occurrence of a data breach involving such extensive personal and medical data suggests that mandated administrative, physical, and technical safeguards may have been insufficient or improperly implemented, raising questions about the company’s data protection practices.

If you have received a data breach notification letter from Arkansas Hospice Inc. d/b/a LifeTouch Health, it confirms that your personal information was compromised while under their custody. This notification establishes your standing to seek legal recourse and hold the company accountable for its security lapses. Understanding your legal rights and potential next steps in the wake of such a serious data exposure is crucial. We offer a free, no-obligation case review to discuss how this breach may affect you.

What our attorneys examine

A cyberattack does not excuse a company from protecting the information it holds. We look at whether Arkansas Hospice Inc. d/b/a LifeTouch Health used reasonable security, how long it kept the data, and how quickly it told the people affected. Those questions decide whether a class action or individual claim is possible. Read more on how ransomware lawsuits work, or browse other incident files in Vermont.

Arkansas Hospice Inc. d/b/a LifeTouch Health data breach questions

How many people were affected by the Arkansas Hospice Inc. d/b/a LifeTouch Health data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Provider and Treatment Dates, Billing and Claims Information, Home Address, Phone Number. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the Arkansas Hospice Inc. d/b/a LifeTouch Health data breach letter legit or a scam?
A notice from Arkansas Hospice Inc. d/b/a LifeTouch Health in the mail matches the breach Arkansas Hospice Inc. d/b/a LifeTouch Health reported to the Vermont Attorney General on October 13, 2026. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Arkansas Hospice Inc. d/b/a LifeTouch Health through a phone number or website you find yourself.
Did Arkansas Hospice Inc. d/b/a LifeTouch Health offer free credit monitoring?
Check your letter from Arkansas Hospice Inc. d/b/a LifeTouch Health. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Using the free service won't stop you from joining a lawsuit or settlement later.
Is there a Arkansas Hospice Inc. d/b/a LifeTouch Health data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Arkansas Hospice Inc. d/b/a LifeTouch Health. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the Arkansas Hospice Inc. d/b/a LifeTouch Health data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official Arkansas Hospice Inc. d/b/a LifeTouch Health breach notice?
Arkansas Hospice Inc. d/b/a LifeTouch Health's report is published by the Vermont Attorney General: https://ago.vermont.gov/categories/security-breach-notices#arkansas-hospice-inc-d-b-a-lifetouch-hea-2026-10-13 Compare it with the letter you received to confirm the dates and details match.
Do I need a Arkansas Hospice Inc. d/b/a LifeTouch Health data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue Arkansas Hospice Inc. d/b/a LifeTouch Health over the data breach?
It depends on what was exposed, the law in Vermont and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a Arkansas Hospice Inc. d/b/a LifeTouch Health data breach settlement or claim be worth?
There is no set amount, and no Arkansas Hospice Inc. d/b/a LifeTouch Health settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Date of Birth, Social Security Number as involved. Keep receipts and records; they're what damages claims are built on.

Other open files in Vermont

Attorney advertising. An incident file reflects a public regulator filing and our review of it; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.