Unverified claim — July 13, 2026: The Qilin ransomware group listed Hillebrand Home Health, a Cincinnati-area in-home elderly care provider, on its leak site. Hillebrand had not issued a public breach confirmation at indexing time, and no victim count or data sample was attested in open reporting.
What is being claimed
Ransomware trackers and legal-investigation pages flagged the listing around July 13, 2026, estimating the attack date the same day. Qilin is an active extortion brand targeting healthcare and municipal victims globally.
Home-health agencies hold exactly the data criminals want: patient demographics, caregiver schedules, insurance identifiers, and sometimes clinical notes tied to frail or homebound seniors who may not monitor credit or email closely.
What is not confirmed
Without a company notice, HHS OCR filing, or independently verified leak sample, treat the Qilin post as unverified marketing. Class-action investigation sites soliciting affected individuals are not the same as a forensic confirmation.
Action items for Hillebrand affiliates
- Watch for calls or texts about “Medicare verification” or home-care billing that cite real-sounding agency details.
- Verify any breach letter by contacting Hillebrand through official phone numbers you already have — not numbers in an unexpected email.
- Monitor Explanation of Benefits if you or a loved one receives home-health services in the Cincinnati area.
Canonical record: Hillebrand 2026 claim on BreachHistory — indexed as unverified.