Imagine the Possibilities Data Breach Exposes PHI and PII

Imagine the Possibilities Inc., a nonprofit disability services organization headquartered at 1710 E. Maple St. in Maquoketa, Iowa, experienced a data breach stemming from PDCM Insurance. A total of 1,693 individuals in the United States were impacted.

The breach was reported to the U.S. Department of Health and Human Services on Sept. 21, 2026. PDCM also posted a notice of the data event online.

The breach took place between April 27, 2025, and April 27, 2025. PDCM Insurance identified the incident the following day.

The breach exposed a wide range of both personally identifiable information and protected health information.

The personally identifiable information involved in the breach included names, addresses, Social Security numbers, driver's license numbers, state identification numbers, taxpayer identification numbers and financial account information.

The protected health information involved in the breach included diagnoses, prescription and medication information, treatment information, treating and referring physician details, medical record numbers, medical policy numbers, group health insurance and subscriber numbers, and individual health insurance and subscriber numbers.

Imagine the Possibilities' response to the breach

Individuals who believe their information may have been involved in this breach should review the posted notice for any specific instructions or resources the organization has made available.

Because of the broad range of sensitive data types involved, affected individuals should consider taking protective steps as soon as possible.