Keep the original breach letter, every update, medical billing records, credit-check results, and all correspondence about suspected misuse. Also keep copies of identity and guardianship documents used to request a child credit search, freeze, or fraud correction. A healthcare data breach means protected health information was exposed or accessed without proper security. The letter is a warning to investigate and preserve evidence; it does not, by itself, prove that someone stole your child's identity.
Table of Contents
- Start with the breach notice
- Preserve records that can reveal medical misuse
- Keep identity and guardianship documents secure
- Save credit-search and freeze records
- Build an evidence file if fraud appears
Start with the breach notice
Save the complete original letter, including its envelope or email headers, plus every later notice from the healthcare organization. Record when you received each item. A hipaa breach notice should describe what happened, the information involved, recommended protective steps, the organization's response, and a contact point, according to U.S.
Health and Human Services. These details help you connect later problems to the incident and ask focused questions. Create a simple incident file containing:.
- The original notice and updates
- Any enrollment details for protection offered by the organization
- Notes from calls, including dates, names, and reference numbers
- Copies of emails, forms, and letters
- Delivery receipts or submission confirmations
Preserve records that can reveal medical misuse
Keep your child's medical bills, insurance statements, and explanations of benefits, commonly called EOBs. An EOB describes services billed to an insurer and what the plan paid or declined; it is not necessarily a bill. Review each record for an unfamiliar provider, appointment, prescription, procedure, or location.
CMS specifically advises reviewing medical billing notices and EOBs after a data incident, as described in its June 2025 incident notice. Save both suspicious records and ordinary records from the same period. The ordinary documents provide context and may help distinguish a billing correction from a service your child never received.
Keep identity and guardianship documents secure
A credit bureau may require proof of the adult's identity and address, along with the child's birth certificate and Social Security card, before processing a child credit-file search or freeze. Retain copies of what you submitted and note where and when you sent them. These documents are highly sensitive.
The Federal Trade Commission's child identity-theft guidance says to keep documents such as Social Security cards and medical bills in a safe place. Use protected digital storage or a secure physical location rather than an everyday email folder or unlocked drawer. Do not send an original birth certificate, Social Security card, or identity document when a copy will satisfy the request. If an organization specifies a submission method, follow those instructions and preserve proof of delivery.
Save credit-search and freeze records
Keep every response from each credit bureau, including a notice that no credit file exists. Children usually do not have credit reports, so a file in a child's name may indicate misuse. If you freeze the child's credit, retain the confirmation, effective date, bureau name, and any identifier needed to manage the freeze.
For a child under 16, the free freeze remains in place until someone requests its removal. Store these records separately for each bureau. A confirmation from one bureau does not document what another bureau reported or processed.
Build an evidence file if fraud appears
If you find an account, charge, or service that does not belong to your child, preserve the evidence before disputing it. Keep the FTC Identity Theft Report, a dated contact log, and every letter or email sent or received; IdentityTheft.gov explains that the report helps establish the theft with businesses. Your fraud file should include: Send copies—not original identity records—with a credit-report dispute.
Keep everything submitted and the bureau's written results, including proof showing when the dispute arrived. If a company closes a fraudulent account or removes a charge, request written confirmation that your child has no liability. Keep that confirmation with the underlying record rather than relying on a phone assurance.
- The questionable bill, EOB, account, or credit entry
- The FTC Identity Theft Report
- Copies of disputes and supporting documents
- Postal receipts, tracking records, or electronic confirmations
- Written investigation results
You Might Also Like
- Healthcare Data Breach Notice: Which Exposed Records Matter?
- What Is New With Healthcare Data Breach News in August 2026? Latest breach notices and security advisories and Key Takeaways
- How to Verify Healthcare Data Breach News Claims in 2026: breach notices and security advisories, Evidence, and Red Flags