Revere Health PC: Utah Medical Clinic Sued by Insurer Over Data Breach Coverage

Insurer Denies Coverage for Utah Medical Clinic’s 2025 Data Breach in Court Filing

Selective Insurance Co. of America has filed a lawsuit in the U.S. District Court for the District of Utah, seeking to avoid covering a proposed class action tied to a 2025 data breach at Revere Health PC. The insurer argues that its commercial general liability policy was not in effect when cybercriminals breached the clinic’s network in August 2025, exposing thousands of patients’ protected health information (PHI).

In its March 20 complaint, Selective contends that multiple policy exclusions including those related to data privacy violations apply, absolving it of any duty to defend or pay claims. The breach allegedly resulted in HIPAA privacy violations, prompting affected patients to pursue legal action against Revere Health.

The case highlights ongoing disputes over insurance coverage for cyber incidents, particularly in the healthcare sector, where regulatory and financial risks remain high.

Source: https://news.bloomberglaw.com/insurance/utah-medical-clinic-sued-by-insurer-over-data-breach-coverage

Revere Health cybersecurity rating report: https://www.rankiteo.com/company/revere-health

"id": "REV1774283943",
"linkid": "revere-health",
"type": "Breach",
"date": "8/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'thousands',
                        'industry': 'Healthcare',
                        'location': 'Utah, USA',
                        'name': 'Revere Health PC',
                        'type': 'Medical Clinic'}],
 'data_breach': {'number_of_records_exposed': 'thousands',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': 'Protected Health Information '
                                             '(PHI)'},
 'date_detected': '2025-08',
 'date_publicly_disclosed': '2025-03-20',
 'description': 'Selective Insurance Co. of America has filed a lawsuit in the '
                'U.S. District Court for the District of Utah, seeking to '
                'avoid covering a proposed class action tied to a 2025 data '
                'breach at Revere Health PC. The insurer argues that its '
                'commercial general liability policy was not in effect when '
                'cybercriminals breached the clinic’s network in August 2025, '
                'exposing thousands of patients’ protected health information '
                '(PHI). The breach allegedly resulted in HIPAA privacy '
                'violations, prompting affected patients to pursue legal '
                'action against Revere Health.',
 'impact': {'data_compromised': 'Protected Health Information (PHI)',
            'legal_liabilities': 'Proposed class action'},
 'references': [{'source': 'Court Filing'}],
 'regulatory_compliance': {'legal_actions': 'Proposed class action',
                           'regulations_violated': ['HIPAA']},
 'title': 'Insurer Denies Coverage for Utah Medical Clinic’s 2025 Data Breach',
 'type': 'Data Breach'}