How do I know if I am affected by the BAYADA Home Health Care, Inc. data breach?

BAYADA Home Health Care, Inc. is mailing notification letters directly to affected individuals. If you have received care or services from BAYADA Home Health Care, Inc. in the period leading up to January 2026 and you have not received a letter, contact the entity directly. 9,526 individuals were confirmed affected in the HHS OCR filing.

What data was exposed in the BAYADA Home Health Care, Inc. breach?

According to the notification letter and supporting filings, the compromised data included: Full name, Date of birth, Diagnosis and medical / physical treatment information, Provider information, Health insurance plan information, Prescription information, Hospital admissions / discharges, Disability information, Social Security number (limited subset).

Was BAYADA Home Health Care, Inc. attacked by a ransomware group?

No threat actor has publicly claimed responsibility for the BAYADA Home Health Care, Inc. breach. The incident is categorized in the HHS OCR portal as a vendor breach.

What is HealthConsent and how does it help with the BAYADA Home Health Care, Inc. breach?

HealthConsent is an independent health-data privacy service. We help affected individuals stop the ongoing flow of their health information by filing HIPAA restriction requests, FTC Health Breach Notification Rule deletion requests, and state-law deletion requests across providers, insurers, Health Information Exchanges, prescription networks, and data brokers. Credit monitoring offered by BAYADA Home Health Care, Inc. addresses identity-theft risk; HealthConsent addresses the longer-tail problem of your exposed health data continuing to be sold and shared by other entities downstream.

Active breach tracker Moorestown, NJ HQ Disclosed January 30, 2026 Part of Doctor Alliance cluster

BAYADA Home Health Care Data Breach 2026 (Doctor Alliance Vendor): 9,526 Home-Health Patients Exposed. SSN + Insurance + Prescriptions in Scope. What To Do

Q: Should I file a lawsuit over the BAYADA Home Health Care, Inc. data breach?

2 plaintiffs' firms have publicly announced investigations or filed complaints related to the BAYADA Home Health Care, Inc. breach: Strauss Borrelli (publicly investigating), McShane & Brady (publicly investigating). We are not a law firm and cannot give legal advice; consult your own attorney to evaluate your options.

BAYADA Home Health Care disclosed in January 2026 that its third-party vendor Doctor Alliance suffered a November 2025 network intrusion exposing names, dates of birth, diagnoses, prescription information, and (for some) Social Security numbers for 9,526 BAYADA home-health patients. Doctor Alliance was BAYADA's vendor for facilitating physician signatures on home-health certifications. 12 months Experian monitoring offered. Here is what to do.

You have options. Scroll for the exact action steps, what your provider’s response covers, and what your health data needs beyond credit monitoring.

By HealthConsent Editorial Last updated May 15, 2026 Sources & methodology

Timeline

Oct 31, 2025

Unauthorized actor begins accessing Doctor Alliance network

Dec 4, 2025

Doctor Alliance notifies BAYADA

Dec 4, 2025

Breach detected

Jan 30, 2026

BAYADA files with HHS OCR + Vermont AG + New Hampshire AG; mails letters

Oct 31, 2025

Unauthorized actor begins accessing Doctor Alliance network

Dec 4, 2025

Doctor Alliance notifies BAYADA

Dec 4, 2025

Breach detected

Jan 30, 2026

BAYADA files with HHS OCR + Vermont AG + New Hampshire AG; mails letters

Data exposed

High-risk identity

Enables financial + identity theft

Date of birth Social Security number (limited subset)

Health records

Don't expire and can't be reissued

Diagnosis and medical / physical treatment information Prescription information

Contact & insurance

Phishing + targeted scams

Full name Provider information Health insurance plan information Hospital admissions / discharges Disability information

Class actions filed by

These firms have publicly announced investigations. You may be eligible to join. We are not a law firm and cannot give legal advice.

Strauss Borrelli (publicly investigating) McShane & Brady (publicly investigating)

If you received a letter

Your action plan, in five steps.

You have more rights than the notification letter explains. Each step below is a concrete thing you can do today. Full detail and timing in the sections that follow.

Accept credit monitoring

It’s the floor of the response. Take it.

Freeze your credit

Free at Equifax, Experian, TransUnion.

File IRS Form 14039

Prevent fraudulent tax return under your SSN.

Review your EOBs

Insurance statements catch medical identity theft early.

Stop the ongoing flow

Credit monitoring doesn’t cover your health records. HealthConsent does.

Jump to step 5: protect my health data

What happened

BAYADA Home Health Care, Inc. is a New Jersey-based nonprofit home health, hospice, and pediatric-care provider operating across approximately 22 US states with thousands of caregivers. The patient population skews elderly, chronically ill, pediatric medically complex, and disabled.

This breach did not originate at BAYADA’s own systems. It originated at Doctor Alliance, a third-party vendor that BAYADA uses to facilitate physician signatures on home-health certifications and plans of care.

Between October 31 and November 17, 2025, an unauthorized actor accessed Doctor Alliance’s network in two windows (Oct 31–Nov 6 and Nov 14–Nov 17). Doctor Alliance discovered the intrusion in mid-November and notified BAYADA on December 4, 2025. BAYADA began mailing individual notification letters on January 30, 2026 and filed with HHS OCR, Vermont AG, and New Hampshire AG the same day — confirming 9,526 affected (1,665 Massachusetts residents per state filings).

The Doctor Alliance incident affects multiple home-health providers including BAYADA, Amedisys, LHC Group, and others, each filing separate OCR reports for their patient subset.

What was stolen

Full name, date of birth
Diagnosis and medical / physical treatment information
Provider information, hospital admissions / discharges
Health insurance plan information
Prescription information
Disability information
Social Security number (for a subset)

The source data was Home Health Certifications and Plans of Care forms processed through Doctor Alliance.

What BAYADA is offering

12 months of complimentary credit monitoring + identity restoration via Experian
Enrollment deadline: April 30, 2026
Dedicated hotline: 833-918-7117 (Monday to Friday, 8 a.m. to 8 p.m. Central)
BAYADA has discontinued Doctor Alliance as a vendor

What to do

Enroll in Experian before April 30, 2026.
Place free credit freezes at all three bureaus.
File IRS Form 14039.
If you are a family member or guardian of a BAYADA home-health patient (elderly, disabled, medically complex), monitor their accounts and statements on their behalf.
Stop the ongoing flow of your home-health data. HealthConsent files HIPAA restriction requests across home-health and prescription networks.

Continue reading

Stop your data from spreading further

Credit monitoring covers your wallet. HealthConsent covers your health records.

Your stolen diagnoses, test results, and medical record numbers don’t expire when the free credit-monitoring window ends. HealthConsent automates HIPAA restriction requests and opt-outs across providers, insurers, HIEs, and prescription networks so the data taken in this breach can’t keep being shared and sold by other entities downstream.

Protect my health data

Cancel anytime · Family plan covers spouses + dependents

Sources & further reading

Official HHS OCR Breach Portal: ocrportal.hhs.gov

About this page

This page is compiled from public regulatory filings, the breached entity’s own disclosures, and reporting from established healthcare-privacy outlets. Some sections are assembled with the help of automated research and may contain errors, summaries that lag the underlying source, or details that have since been revised. Treat it as a starting point, not legal advice or an authoritative record. If you spot something inaccurate, the linked sources above are the canonical record. For questions about your individual situation, contact the breached entity directly or consult a licensed attorney.