Ernest Health Hospitals Data Breach

Will Gendron
Editor in Chief
Published
April 8, 2024
Updated
June 28, 2024
Ernest Health Hospitals Data Breach
Ernest Health
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Hospital Network Data Breach

On February 1, 2024, Ernest Health was alerted to unusual activity within its Information Technology (IT) systems. Subsequent investigations revealed that an unauthorized party had gained access to the IT network from January 16, 2024, to February 4, 2024. During this period, the intruder accessed and potentially acquired files containing sensitive patient information. The compromised data includes names, addresses, dates of birth, medical record numbers, health insurance plan member IDs, claims data, diagnosis, and prescription information. For some individuals, Social Security numbers and driver’s license numbers were also exposed.

Ernest's Response to the Data Breach

Upon discovering the breach, Ernest Health secured and isolated the affected IT systems to prevent further unauthorized access. The organization engaged a third-party cybersecurity firm to assist with the investigation and has been in communication with law enforcement to address the situation. As part of their response, Ernest Health began mailing notification letters to potentially impacted patients on March 29, 2024. They have also offered complimentary credit monitoring and identity protection services to those whose Social Security numbers or driver’s licenses may have been compromised.

Steps to Take if You Are Affected

If you believe your information was involved in this breach, it is crucial to stay vigilant and take the following steps to protect your identity:

  1. Monitor your financial accounts for any unauthorized transactions and alert your financial institution immediately if you notice anything suspicious.
  2. Review the statements from your health plan. If you find services you did not receive, contact your health insurer right away.
  3. Consider placing a fraud alert on your credit reports, which will warn creditors to take extra verification steps before opening new accounts in your name.
  4. Take advantage of the complimentary credit monitoring and identity protection services offered by Ernest Health. You can enroll by calling the dedicated toll-free response line at 844-563-2187, available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding major U.S. holidays.

For more detailed information and to view the official Notice to Consumers, please visit the Texas Attorney General's website.

Affected Hospitals

Arizona

  • Mountain Valley Regional Rehabilitation Hospital
  • Rehabilitation Hospital of Northern Arizona

California

  • Bakersfield Rehabilitation Hospital
  • Rehabilitation Hospital of Southern California
  • Sacramento Rehabilitation Hospital
  • Stockton Regional Rehabilitation Hospital

Colorado

  • Denver Regional Rehabilitation Hospital
  • Northern Colorado Long Term Acute Hospital
  • Northern Colorado Rehabilitation Hospital

Idaho

  • Northern Idaho Advanced Care Hospital
  • Rehabilitation Hospital of the Northwest

Indiana

  • Bloomington Regional Rehabilitation Hospital
  • Lafayette Regional Rehabilitation Hospital
  • Rehabilitation Hospital of Northern Indiana

Montana

  • Advanced Care Hospital of Montana

New Mexico

  • Advanced Care Hospital of Southern New Mexico
  • Rehabilitation Hospital of Southern New Mexico

Ohio

  • Rehabilitation Hospital of Northwest Ohio
  • Summa Rehab Hospital

South Carolina

  • Greenwood Regional Rehabilitation Hospital
  • Lexington Regional Rehabilitation Hospital
  • Midlands Regional Rehabilitation Hospital
  • Spartanburg Rehabilitation Institute

Texas

  • Corpus Christi Rehabilitation Hospital (3,763 Texans affected)
  • Laredo Rehabilitation Hospital (1,888 Texans affected)
  • Laredo Specialty Hospital (1,393 Texans affected)
  • Mesquite Rehabilitation Institute (3,458 Texans affected)
  • Mesquite Specialty Hospital (1,453 Texans affected)
  • New Braunfels Regional Rehabilitation Hospital (5,572 Texans affected)
  • South Texas Rehabilitation Hospital (4,237 Texans affected)
  • Trustpoint Rehabilitation Hospital of Lubbock (8,088 Texans affected)
  • Weslaco Regional Rehabilitation Hospital (2,890 Texans affected)

Utah

  • Northern Utah Rehabilitation Hospital
  • Utah Valley Specialty Hospital

Wisconsin

  • Green Bay Rehabilitation Hospital

Wyoming

  • Elkhorn Valley Rehabilitation Hospital

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Ernest Health
Consumers Notification date
Date of Breach
Breach Discovered Date
Total People Affected
Information Types Exposed
- Name of individual - Social Security Number Information - Driver’s License number - Medical Information - Health Insurance Information

Join the

Ernest Health

data breach lawsuit. It's free to join. 

Join the Lawsuit
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image