Lakeside Pediatrics & Adolescent Medicine Data Breach 2026: 34,154 Idaho Pediatric Patients Exposed. Minors' SSNs at Risk. What To Do

What happened

Lakeside Pediatrics & Adolescent Medicine, PLLC is a single-site pediatric primary-care practice at 980 W Ironwood Drive, Coeur d’Alene, Idaho. The practice specializes in pediatric and adolescent medicine — meaning the affected population is overwhelmingly minor patients.

The intrusion began on approximately October 15, 2024 and was discovered around November 1, 2024. The manual document review took 14 months, concluding December 26, 2025. Lakeside Pediatrics reported to the HHS Office for Civil Rights and the Washington Attorney General on February 27, 2026, confirming 34,154 affected individuals (1,314 Washington residents disclosed). Individual notification letters were mailed in March 2026.

No ransomware group has publicly claimed responsibility. No leak-site listing has been identified. The 14-month gap between discovery and notification is the longest among the 2026 pediatric breaches and will likely be the focal point of any class-action negligence theory.

What was stolen

• Full name
• Social Security number
• Date of birth (full)
• Home address
• Health insurance policy / ID number
• Medical information

The combination of a minor’s full DOB + SSN + medical record creates a near-complete identity-theft starter kit usable for 15+ years before the minor would notice on credit pulls. Synthetic identity theft using children’s SSNs is a known and high-value attack pattern.

What Lakeside Pediatrics is offering

• Complimentary single-bureau credit monitoring, credit reports, and credit score services through Cyberscout (TransUnion)
• 90-day enrollment window from notification

No identity-restoration tier or extended (multi-year) monitoring has been disclosed publicly, which is below industry norm for minor-PHI exposures.

What to do (parent / guardian)

1. Freeze your child’s credit at all three bureaus immediately. Minors are entitled to free credit freezes; each bureau requires manual outreach with proof of guardianship.
2. Pull a credit report for your child at annualcreditreport.com. If a credit file exists for a minor, that itself is a red flag for synthetic identity theft.
3. Enroll your child in the Cyberscout monitoring through the code in your letter.
4. File IRS Form 14039 under your child’s SSN to prevent fraudulent tax-return filings.
5. Stop the ongoing flow of your child’s health data. HealthConsent files HIPAA restriction requests on behalf of your minor child so their pediatric records are not continuously re-shared by downstream entities.

Continue reading

• Your eight HIPAA rights, in plain English
• Other 2026 healthcare data breaches