**HopeHealth Data Breach Exposes Sensitive Patient Information in March 2025 Incident**
HopeHealth, a healthcare provider, disclosed a data breach in which unauthorized access to sensitive personal and health information may have occurred. On March 20, 2025, the organization detected suspicious activity within its network and initiated an investigation.
The breach, which took place between March 19 and March 20, 2025, potentially exposed a wide range of data, including names, Social Security numbers, addresses, dates of birth, medical records, insurance details, prescription information, and financial data such as credit/debit card numbers. The review of affected records was completed on November 21, 2025, with impacted individuals notified via mail beginning in early December.
HopeHealth published a breach notice on its website on December 4, 2025, detailing the incident and offering complimentary credit monitoring services to those affected. The exposed data varies by individual, encompassing both personally identifiable information (PII) and protected health information (PHI). The full scope of the breach remains under investigation.
Source: https://straussborrelli.com/2025/12/10/hopehealth-data-breach-investigation/
HopeHealth cybersecurity rating report: https://www.rankiteo.com/company/hopehealthco
"id": "HOP1765418550",
"linkid": "hopehealthco",
"type": "Breach",
"date": "12/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'name': 'HopeHealth',
'type': 'Healthcare Provider'}],
'customer_advisories': 'Providing affected individuals with a list of the '
'specific types of sensitive information impacted and '
'complimentary credit monitoring services',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Address',
'Date of birth',
'Username and password',
'Driver’s license number',
'State identification card '
'number',
'Birth certificate',
'Prescription information',
'Mental or physical condition',
'Mental or physical treatment',
'Clinical information',
'Health insurance information',
'Medical record number',
'Patient number',
'Other ID number',
'Credit/debit card number',
'Credit/debit card expiry',
'Date of service',
'Lab results']},
'date_detected': '2025-03-20',
'date_publicly_disclosed': '2025-12-04',
'description': 'HopeHealth experienced a data breach where sensitive personal '
'identifiable information and protected health information may '
'have been compromised. An unauthorized third party accessed '
'and acquired sensitive data between March 19 and March 20, '
'2025.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'source': 'HopeHealth Breach Notice'}],
'response': {'communication_strategy': 'Posted breach notice on website and '
'mailed data breach notification '
'letters to impacted individuals'},
'title': 'HopeHealth Data Breach',
'type': 'Data Breach'}