Laurel Health Centers Suffers Major Data Breach Exposing Sensitive Patient Information
On July 14, 2025, Laurel Health Centers a network of Federally Qualified Health Centers (FQHCs) serving northern Pennsylvania detected unusual activity in its email environment. An investigation revealed that an unauthorized actor had accessed multiple email accounts between July 11 and July 25, 2025, potentially viewing or exfiltrating sensitive patient data.
The breach exposed a wide range of personally identifiable information (PII) and protected health information (PHI), including names, dates of birth, Social Security numbers, addresses, medical records, insurance details, treatment histories, financial data (such as credit card and bank account numbers), and behavioral health records. The threat actor remained undetected for nearly two weeks, during which time files may have been copied in addition to being accessed.
Laurel Health Centers completed its review of impacted data on December 30, 2025, before initiating notifications to affected individuals and regulatory agencies. The organization is offering free credit monitoring and identity protection services to those whose information was compromised, with a dedicated assistance line for concerned individuals.
The incident underscores the risks of prolonged unauthorized access in healthcare systems, where sensitive data remains a prime target for cyber threats.
Source: https://www.claimdepot.com/data-breach/laurel-health-centers-2026
Laurel Health Centers cybersecurity rating report: https://www.rankiteo.com/company/laurel-health-centers
"id": "LAU1768842942",
"linkid": "laurel-health-centers",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Northern Pennsylvania, USA',
'name': 'Laurel Health Centers',
'type': 'Federally Qualified Health Center (FQHC)'}],
'attack_vector': 'Email Compromise',
'customer_advisories': 'Free credit monitoring and identity protection '
'services offered; dedicated assistance line for '
'concerned individuals',
'data_breach': {'data_exfiltration': 'Potential',
'personally_identifiable_information': ['Names',
'Dates of birth',
'Social Security '
'numbers',
'Addresses',
'Medical records',
'Insurance details',
'Treatment histories',
'Financial data '
'(credit card and '
'bank account '
'numbers)',
'Behavioral health '
'records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally identifiable '
'information (PII)',
'Protected health information '
'(PHI)']},
'date_detected': '2025-07-14',
'date_publicly_disclosed': '2025-12-30',
'description': 'On July 14, 2025, Laurel Health Centers detected unusual '
'activity in its email environment. An investigation revealed '
'that an unauthorized actor had accessed multiple email '
'accounts between July 11 and July 25, 2025, potentially '
'viewing or exfiltrating sensitive patient data. The breach '
'exposed personally identifiable information (PII) and '
'protected health information (PHI), including names, dates of '
'birth, Social Security numbers, addresses, medical records, '
'insurance details, treatment histories, financial data, and '
'behavioral health records.',
'impact': {'data_compromised': 'Personally identifiable information (PII) and '
'protected health information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Email environment'},
'initial_access_broker': {'entry_point': 'Email environment'},
'investigation_status': 'Completed',
'lessons_learned': 'The incident underscores the risks of prolonged '
'unauthorized access in healthcare systems, where '
'sensitive data remains a prime target for cyber threats.',
'regulatory_compliance': {'regulations_violated': ['HIPAA'],
'regulatory_notifications': 'Yes'},
'response': {'communication_strategy': 'Notifications to affected individuals '
'and regulatory agencies; free credit '
'monitoring and identity protection '
'services offered'},
'title': 'Laurel Health Centers Suffers Major Data Breach Exposing Sensitive '
'Patient Information',
'type': 'Data Breach'}