On October 31, 2024, home-care provider In-Home Attendant Services (inhometexas.com) appeared on the leak site operated by the threeam ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, which assists individuals of all ages and disabilities with independent living through both Consumer Directed Services and Agency options, has not yet published a public breach notification quantifying how many patients, employees, or partners may be affected.
Watch inhometexas.com
Get alerted the next time inhometexas.com files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about inhometexas.com’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details from the Leak Site
The threeam leak-site entry explicitly lists inhometexas.com and claims successful data exfiltration following a ransomware deployment. No specific volume of records is disclosed, and the listing does not enumerate the exact file types or data fields involved. The disclosure indicates that the company’s internal documents were taken; the precise contents remain unknown to the public. As of the publication date, the group had not posted any sample data, though such postings are common later in their playbook. The incident therefore sits in the high-severity category typical of confirmed ransomware data-theft cases, even while exact victim counts stay unconfirmed.
Why This Matters for You and Your Family
If you or a family member have ever received services from In-Home Attendant Services in Texas, your personal information may now sit in an attacker’s archive. Internal files in home-health environments routinely contain names, addresses, dates of birth, Social Security numbers, medical records, caregiver assignments, and payment details. Exposure of this information creates immediate risks of identity theft, insurance fraud, and targeted scams that feel deeply personal because attackers know you or your loved one required daily living assistance. Even when exact numbers are unknown, the nature of the provider means families already navigating disability, aging, or recovery now face an added layer of privacy stress.
Doxxing and Identity-Chain Risks
Ransomware groups rarely stop at one dataset. A single exposed email or phone number from these internal files can be chained with information from other breaches to build a complete profile. Threat actors then target linked accounts, including online patient portals, government benefit logins, and especially gaming accounts belonging to children or grandchildren who share the household. These gaming credentials often reuse passwords or security questions derived from family details, turning one breach into a cascading doxxing chain that can expose addresses, daily routines, and even real-time location data. The speed at which such chains form has accelerated; what once took months can now surface in days once the initial leak appears on a dark-web marketplace.