The United Seating and Mobility LLC dba Numotion data breach: your legal rights

Your rights after this breach

• To be told about the breach

  Indiana law requires a company that loses residents' personal information to notify them. United Seating and Mobility LLC dba Numotion reported this breach to the Indiana Attorney General.

  Indiana data breach notification law

• To file a health privacy complaint

  Medical or insurance information is listed. You can file a complaint with the U.S. Department of Health and Human Services. That law does not let you sue directly, but state-law claims may still be possible.

  HIPAA (complaints to HHS Office for Civil Rights)

• Limits on what you owe for fraud

  Account or card information is listed. Report unauthorized charges quickly; federal law caps how much you can be held responsible for, and the sooner you report, the lower the cap.

  Electronic Fund Transfer Act and Fair Credit Billing Act

• To ask whether you can recover money

  If United Seating and Mobility LLC dba Numotion did not take reasonable care of your information, you may have a claim for negligence or under Indiana law. An attorney can review it with you for free.

  Indiana common law and consumer protection statutes

What United Seating and Mobility LLC dba Numotion reported

Reported to

Indiana Attorney General

Date filed

May 22, 2026

People notified

Not stated

Cause in filing

Not stated

Information listed in the filing: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, Financial Account Number, Mailing Address.

8United Seating and Mobility LLC dba Numotion operates as a premier provider of complex rehab technology, mobility solutions, and medical equipment designed to assist individuals with significant physical disabilities and mobility impairments. Because of the specialized nature of its operations, Numotion interacts closely with patients, healthcare systems, insurance payers, and physicians. To deliver custom wheelchairs, seating systems, and ongoing clinical support, the company collects and maintains a vast repository of highly sensitive information. This includes comprehensive medical histories, detailed clinical assessments, billing details, and personal identifiers, making it a critical repository for deeply private health and financial records.

The security incident reported by Numotion to the Indiana Attorney General in 2026 highlights the persistent vulnerabilities facing organizations entrusted with protected health information. While organizations in the medical equipment and healthcare sector are frequent targets for sophisticated cybercriminals, breaches of this magnitude typically involve unauthorized access to enterprise networks, compromised employee credentials, or vulnerabilities within third-party vendor ecosystems. These incidents often unfold when malicious actors exploit legacy systems or deploy ransomware designed to exfiltrate bulk data before encryption, leaving critical operational and patient databases exposed to illicit actors.

Investigations into a healthcare technology breach of this nature generally reveal the exposure of a dangerous combination of sensitive data categories, including full legal names, dates of birth, Social Security numbers, health insurance policy details, and granular medical diagnosis or equipment prescription records. The compromise of this specific amalgamation of data creates severe, long-term risks for affected individuals. Medical identity theft can result in fraudulent claims billed to insurance providers or compromised medical records that jeopardize future patient care. Furthermore, when Social Security numbers and financial details are exposed alongside clinical records, victims face heightened threats of targeted financial fraud, synthetic identity creation, and permanent credit degradation.

As an entity handling protected health information, 8United Seating and Mobility LLC dba Numotion is bound by stringent regulatory frameworks, most notably the Health Insurance Portability and Accountability Act (HIPAA) Security and Privacy Rules, as well as state consumer protection statutes. These laws mandate the implementation of robust administrative, physical, and technical safeguards—such as multi-factor authentication, rigorous network monitoring, data encryption, and regular vulnerability assessments—to prevent unauthorized data exfiltration. The occurrence of a data breach of this scale strongly suggests potential failures in upholding these mandatory security standards, raising serious questions about whether the company adequately protected the vulnerable population it serves.

Receiving a data breach notification letter from Numotion serves as formal legal acknowledgment that your confidential medical and personal information was compromised due to corporate security deficiencies. Under modern class action jurisprudence, the receipt of such a notice establishes legal standing to pursue claims against the company for negligence, breach of fiduciary duty, and invasion of privacy, without requiring proof of immediate out-of-pocket financial loss. Our law firm is actively investigating potential class action litigation on behalf of affected Indiana residents. We handle all data breach cases on a strict contingency fee basis, meaning you pay no out-of-pocket costs or legal fees unless we successfully recover compensation on your behalf.

Other breaches reported in Indiana

• Bozeman School DistrictIndiana Attorney General · Filed date pending
  Count not stated
• Bozeman School DistrictIN Attorney General · Filed date pending
  Count not stated
• Teamsters Local 17Indiana Attorney General · Filed date pending
  Count not stated
• Teamsters Local 17IN Attorney General · Filed date pending
  Count not stated
• BankIndiana Attorney General · Filed date pending
  Count not stated
• BankIN Attorney General · Filed date pending
  Count not stated