Northwest Medical Homes Data Breach Exposes Sensitive Patient Information
Northwest Medical Homes, now operating as Springfield Family Physicians with locations in Springfield and Eugene, Oregon, disclosed a data breach that may have compromised sensitive patient information. The unauthorized access to the company’s network occurred between March 19, 2025, and May 20, 2025, with the intrusion detected on May 13, 2025.
The exposed data includes names, addresses, dates of birth, medical details, and health insurance information. In some cases, Social Security numbers were also affected. Following the discovery, Northwest Medical Homes initiated an incident response, engaging third-party cybersecurity experts to secure its systems and conduct a forensic investigation to assess the breach’s scope.
Legal teams are now investigating the possibility of a class action lawsuit on behalf of affected individuals, seeking compensation for potential harm, including loss of privacy, out-of-pocket costs, and time spent addressing the breach. The company has not yet disclosed the total number of individuals impacted. Further updates on the investigation and potential legal action are expected as details emerge.
Source: https://www.classaction.org/data-breach-lawsuits/northwest-medical-homes-march-2026
Springfield Family Physicians cybersecurity rating report: https://www.rankiteo.com/company/springfield-family-physicians
"id": "SPR1772879060",
"linkid": "springfield-family-physicians",
"type": "Breach",
"date": "3/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Springfield and Eugene, Oregon, USA',
'name': 'Northwest Medical Homes (Springfield Family '
'Physicians)',
'type': 'Healthcare Provider'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Addresses',
'Dates of birth',
'Medical details',
'Health insurance information',
'Social Security numbers']},
'date_detected': '2025-05-13',
'description': 'Northwest Medical Homes, now operating as Springfield Family '
'Physicians with locations in Springfield and Eugene, Oregon, '
'disclosed a data breach that may have compromised sensitive '
'patient information. The unauthorized access to the company’s '
'network occurred between March 19, 2025, and May 20, 2025, '
'with the intrusion detected on May 13, 2025. The exposed data '
'includes names, addresses, dates of birth, medical details, '
'and health insurance information. In some cases, Social '
'Security numbers were also affected.',
'impact': {'data_compromised': 'Sensitive patient information including '
'names, addresses, dates of birth, medical '
'details, health insurance information, and '
'Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Incident disclosure'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'response': {'containment_measures': 'Secured systems',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'Engaged third-party cybersecurity '
'experts'},
'title': 'Northwest Medical Homes Data Breach Exposes Sensitive Patient '
'Information',
'type': 'Data Breach'}