Sunrise Company Data Breach Exposes Sensitive Patient Data

On July 28, 2026, Sunrise Company, an integrated behavioral health and elder-care services provider based in Indiana, reported a cybersecurity incident that occurred on April 23, 2026. This breach involved its internal network infrastructure, potentially compromising sensitive personal data it stores for its patients and program participants.

The information reportedly exposed in this breach includes Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Home Address, and Phone Number. The compromise of such foundational and health-related data puts individuals at heightened risk for medical identity theft, fraudulent insurance claims, and various financial frauds.

As a healthcare and elder-care provider, Sunrise Company has strict legal obligations under federal and Indiana law, including the Health Insurance Portability and Accountability Act (HIPAA) and the Indiana Disclosure of Security Breach Law, to safeguard patient data. The occurrence of a breach of this magnitude suggests potential shortcomings in the company's cybersecurity measures and data protection protocols.

If you received a data breach notification letter from Sunrise Company, it serves as an official acknowledgment that your private information was compromised. This letter establishes your legal standing to explore potential remedies, including participating in legal action, even if you haven't yet experienced direct financial loss. The increased risk of future harm and the invasion of privacy are recognized legal injuries.

Understanding the implications of your notification letter is crucial for protecting your rights. We offer a free, no-obligation case review to help you understand what this breach means for you, with no out-of-pocket costs unless we successfully recover compensation on your behalf.