University of Iowa Health Care and UI Community HomeCare Under Investigation for Data Breach of Over 200,000 Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of 211,000 patients of UI Community HomeCare, an Iowa-based full-service home infusion and medical equipment services provider that serves individuals living in Iowa, western Illinois, and northern Missouri. UI Community HomeCare is an affiliate of University of Iowa Health Care (UIHC). UI Community HomeCare and UIHC share patients, employees, and data files.

 UI Community HomeCare discovered that an unauthorized third party accessed its computer systems and viewed and acquired files containing patient data on July 3, 2025.

Although the breach began in July 2025, UI Community HomeCare and UIHC did not begin notifying affected individuals until on or around August 29, 2025, which may have violated state and federal laws. The following information may have been compromised in the breach: names, addresses, phone numbers, dates of birth, provider names, medical record numbers, visit types, date(s) of service, insurance information, and Social Security numbers.

If your personal information was impacted by this incident, you may be at risk of identity theft and other serious violations of your privacy. As a result, you may be entitled to money damages and an injunction requiring changes to UI Community HomeCare’s cybersecurity practices.

If you received notification of this data breach or are a patient of UI Community HomeCare and wish to obtain additional information about your legal rights, please fill out the form below.