Datavant Data Breach Update: Now Over 49,000 Victims

Published
December 7, 2024
Updated
February 14, 2025
Datavant Data Breach Update: Now Over 49,000 Victims
Datavant
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

In a recent data breach, Ciox Health LLC, doing business as Datavant Group, experienced a significant security incident that 49,454 people across the United States.

The breach was discovered on May 9, 2024, and it was later disclosed to various state authorities, including the Maine Attorney General's office on February 12, 2025, the Massachusetts Attorney General's office on December 6, 2024, and the Texas Attorney General's office on December 23, 2024.

The breach exposed a wide array of sensitive consumer info:

  • Name of individual
  • Address
  • Social Security Number
  • Driver’s License number
  • Government-issued ID number (e.g., passport, state ID card)
  • Financial Information (e.g., account number, credit or debit card number)
  • Medical Information
  • Health Insurance Information
  • Date of Birth
  • Account credentials
  • Digital signatures
  • Contact information

The breach affected 470 individuals in Texas, 17 in Maine, and 12 in Massachusetts. The detailed disclosures can be found on the websites of the Maine Attorney General, Texas Attorney General, and Massachusetts Attorney General.

Datavant Group's Response

Following the discovery of the breach, Datavant Group took steps to address the situation and mitigate the potential impact on affected individuals. The company notified consumers of the breach on December 6, 2024, through written communication, publication in print media, and notices posted on their website. Additionally, they used U.S. Mail to reach those affected.

Given the severity of the breach and the range of information exposed, it is crucial for affected individuals to take proactive measures to protect themselves. This includes monitoring their financial accounts for suspicious activity, reviewing their credit reports, and considering placing a fraud alert or credit freeze on their credit files.

About Datavant Group

Datavant is a data logistics company that enables healthcare organizations to securely move and connect data. It's created a network of networks that includes more than 70,000 hospitals and clinics, 70% of the 100 largest health systems, and an ecosystem of over 600 real-world data partners. For more information about Datavant, you can visit their official website.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

Affected Entity
Datavant
Consumers Notification date
December 6, 2024, December 06, 2024, December 06, 2024
Date of Breach
Breach Discovered Date
May 09, 2024
Total People Affected
49454
Information Types Exposed
  • Name of individual
  • Address
  • Social Security Number Information
  • Driver’s License number
  • Government-issued ID number (e.g. passport, state ID card)
  • Financial Information (e.g. account number, credit or debit card number

Join the

Datavant

data breach lawsuit. It's free to join. 

Join the Lawsuit
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image