**Covenant Health Data Breach Exposes Personal and Medical Records of 400,000 Individuals**
On January 5, 2026, Covenant Health, a New England-based healthcare provider network, disclosed a cybersecurity incident that compromised the sensitive data of over 400,000 individuals. An unauthorized actor accessed Covenant’s systems, potentially exfiltrating personally identifiable information (PII) and protected health information (PHI), including names, addresses, dates of birth, Social Security numbers, medical record numbers, and treatment details such as diagnoses and care histories.
The breach is under investigation by Lynch Carpenter LLP, a national class action law firm, which is reviewing potential legal claims on behalf of affected individuals. Covenant Health serves multiple locations across New England, though the full scope of impacted facilities has not been specified.
No details have been released regarding the attack vector, timeline of the intrusion, or whether ransomware or other malicious tools were involved. The incident highlights ongoing risks to healthcare data security, as providers remain prime targets for cybercriminals seeking valuable medical and financial records.
Covenant Health cybersecurity rating report: https://www.rankiteo.com/company/covenant-health
"id": "COV1767633656",
"linkid": "covenant-health",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '400000',
'industry': 'Healthcare',
'location': 'New England, USA',
'name': 'Covenant Health, Inc.',
'type': 'Healthcare Provider Network'}],
'customer_advisories': 'Individuals impacted may be entitled to compensation. '
'Legal review available via Lynch Carpenter, LLP.',
'data_breach': {'number_of_records_exposed': '400000',
'personally_identifiable_information': ['Names',
'Addresses',
'Dates of Birth',
'Social Security '
'Numbers',
'Medical Record '
'Numbers',
'Medical Treatment '
'Details (Diagnosis, '
'Dates of Treatment, '
'Types of Treatment)'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_publicly_disclosed': '2026-01-05',
'description': 'An unauthorized person gained access to Covenant Health’s '
'network and may have acquired records containing personally '
'identifiable information (PII) and protected health '
'information (PHI) of over 400,000 individuals.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High'},
'investigation_status': 'Under Investigation (by Lynch Carpenter, LLP)',
'references': [{'date_accessed': '2026-01-05',
'source': 'Globe Newswire',
'url': 'https://covenanthealth.net/where-we-serve/'}],
'regulatory_compliance': {'regulations_violated': ['HIPAA']},
'title': 'Covenant Health Data Breach',
'type': 'Data Breach'}