Industry
LHC Group Reports Patient Data Breach After Employee Phishing Attack
LHC Group, a home health and hospice provider owned by UnitedHealth Group's Optum, disclosed a data breach stemming from a voice phishing (vishing) attack on an employee. The company became aware of the incident on April 7, 2026, and issued a public notice in September 2026. Patient information was exposed in the breach. The notice does not specify the number of affected individuals or what types of patient data were compromised.
Why it mattersMedicaid managed care organizations contracting with home health providers must assess vendor cybersecurity risk, particularly as vishing attacks targeting healthcare employees become more common.