Arkansas Hospice / LifeTouch Health network incident

The hospice’s May notice described confirmed unauthorized access and possible exposure of protected health information.

Last modified

Summary

  • Environment: Hospice network and stored information
  • Operational impact: Certain systems disrupted around March 12; duration not established
  • Financial impact: No incident cost established in the reviewed evidence
  • Record status: Developing record. Reviewed October 14, 2026; updated as evidence emerges.

What happened

Arkansas Hospice, doing business as LifeTouch Health, experienced a network disruption around March 12, 2026. Its May 11 notice says an investigation established unauthorized access to network information for a limited period. [1]

Impact

Some protected health information may have been accessed. Potential fields varied by person and included names, Social Security numbers, birth dates, treatment information and diagnoses. The May notice gives no population total and says data review was ongoing at that time. [1]

Timeline

  1. Public notice dated

    The hospice disclosed its earlier disruption and continuing review of potentially affected information.

    [1]
  2. Briefing updated

    This briefing was last reviewed and updated on October 14, 2026.

Threat Group & Attack Vector

The notice does not identify an intrusion method or a precise access interval. Its approximate disruption date should not be treated as an exact attack start. [1]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

The hospice secured its network, engaged external forensic specialists and provided a dedicated inquiry line. [1]