Three Oaks Hospice of Dallas Data Breach Impacts 3,034 Texans: PHI and PII Exposed

Published
September 18, 2026
Updated
September 18, 2026
Three Oaks Hospice of Dallas Data Breach Impacts 3,034 Texans: PHI and PII Exposed
Three Oaks Hospice

Three Oaks Hospice Inc, a hospice and palliative care provider headquartered in Dallas, disclosed a data breach. The company, founded in 2019, provides hospice and palliative care services to patients with life-limiting illnesses and their families, with a focus on pain and symptom management as well as emotional and spiritual support.

Along with its sister companies, including Agape Hospice Care, Elevation Hospice of Colorado, Elevation Hospice of Utah and Sage Hospice, the organization serves patients through locations in Arizona, Colorado, Georgia, Illinois, Kansas, Missouri, Pennsylvania, South Carolina and Texas, according to the company's notification.

The breach was reported to the Texas Attorney General on Sept. 17, 2026, with 3,034 Texas residents identified as affected. The company posted a notice of the data incident on its website.

Three Oaks Hospice first discovered the unauthorized activity in its email environment on Aug. 8, 2025. Following the discovery of the issue, Three Oaks Hospice launched an investigation into the scope and nature of the incident.

On July 20, 2026, nearly a year after the issue was first detected, the investigation determined that the unauthorized email activity had affected personal information. The company reviewed the affected email accounts to determine what personal data they contained and which individuals were potentially impacted.

The investigation found that several types of sensitive data were potentially exposed as a result of the incident. The personally identifiable information (PII) at risk included names, dates of birth, Social Security numbers and driver's license numbers.

The breach also potentially exposed protected health information (PHI), including medical information and health insurance information.

Three Oaks Hospice's response to the breach

Three Oaks Hospice notified its affected affiliated hospices on Aug. 17, 2026, about a month after completing its determination. The company said it is now in the process of notifying all impacted individuals and providing them with resources and support.

To help affected individuals get answers, Three Oaks Hospice has established a dedicated toll-free call center. Those who believe they may have been affected or have questions about the incident can contact the company at 1-800-610-8965. The call center is available from 7 a.m. to 7 p.m. Central Time, Monday through Friday, excluding major U.S. holidays.

Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info
  • Affected information types not yet disclosed

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Three Oaks Hospice
Consumers Notification date
Date of Breach
July 20, 2026
Breach Discovered Date
August 8, 2025
Total People Affected
Information Types Exposed
  • Name of individual
  • Social Security Number Information
  • Medical Information
  • Health Insurance Information
  • Date of Birth
  • Driver license numbers
  • Names
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image