Lifepoint Health Data Breach Exposes Vendor Employee Information
Lifepoint Health, a healthcare provider operating over 60 hospitals across 28 states, disclosed a data breach affecting employees of its contracted vendors. On February 22, 2026, an unauthorized third party accessed the company’s internal systems using a compromised user account. The breach was detected the following day, prompting an investigation with third-party cybersecurity experts.
The exposed data included names, addresses, phone numbers, dates of birth, and Social Security numbers though the breach did not impact Lifepoint’s patients or direct employees. Notifications to affected individuals began on April 23, 2026.
In response, Lifepoint Health offered one year of complimentary identity theft protection and credit monitoring through Equifax ID Watchdog. The company also provided guidance on monitoring financial accounts and credit reports for suspicious activity. Affected individuals were directed to contact their facility’s privacy officer for further assistance.
Source: https://www.claimdepot.com/data-breach/lifepoint-health-2026
Lifepoint Health® cybersecurity rating report: https://www.rankiteo.com/company/lifepoint-health
"id": "LIF1781735257",
"linkid": "lifepoint-health",
"type": "Breach",
"date": "2/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'Vendor employees',
'industry': 'Healthcare',
'location': 'United States (28 states)',
'name': 'Lifepoint Health',
'size': '60+ hospitals',
'type': 'Healthcare Provider'}],
'attack_vector': 'Compromised user account',
'customer_advisories': 'One year of complimentary identity theft protection '
'and credit monitoring through Equifax ID Watchdog; '
'guidance on monitoring financial accounts and credit '
'reports',
'data_breach': {'personally_identifiable_information': 'Names, addresses, '
'phone numbers, dates '
'of birth, Social '
'Security numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII)'},
'date_detected': '2026-02-23',
'date_publicly_disclosed': '2026-04-23',
'description': 'Lifepoint Health disclosed a data breach affecting employees '
'of its contracted vendors after an unauthorized third party '
'accessed the company’s internal systems using a compromised '
'user account. The exposed data included names, addresses, '
'phone numbers, dates of birth, and Social Security numbers.',
'impact': {'data_compromised': 'Names, addresses, phone numbers, dates of '
'birth, Social Security numbers',
'identity_theft_risk': 'High',
'systems_affected': 'Internal systems'},
'initial_access_broker': {'entry_point': 'Compromised user account'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Lifepoint Health Disclosure'}],
'response': {'communication_strategy': 'Notifications to affected '
'individuals, guidance on monitoring '
'financial accounts and credit reports',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'Cybersecurity experts'},
'threat_actor': 'Unauthorized third party',
'title': 'Lifepoint Health Data Breach Exposes Vendor Employee Information',
'type': 'Data Breach'}