Duncan Regional Hospital Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Duncan Regional Hospital, Inc. (DRH Health) data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Duncan Regional Hospital, Inc. (DRH Health)
Duncan Regional Hospital, Inc. (DRH Health) is a not-for-profit regional health system based in Duncan, Oklahoma. With a history spanning over 45 years, DRH Health serves communities in Stephens and Jefferson counties, focusing on providing medical care and health services through two hospitals and 20 provider clinics.
The organization operates 128 beds and offers a range of specialty practices, including cancer care, wound care, and cardiac services. DRH Health employs between 501 and 1,000 people, aiming to improve community health through reinvestment in technology, services, and staff development.
What Happened?
In July 2024, DRH Health’s third-party vendor, Nationwide Recovery Services, Inc. (NRS), experienced a significant cybersecurity incident. On July 11, 2024, NRS discovered that an unknown actor had gained unauthorized access to its network between July 5 and July 11, 2024. During this time, files stored on one of NRS’s systems were copied by the unauthorized party.
Although the breach occurred in July 2024, DRH Health was not informed of the potential impact on its patients until February 14, 2025. After receiving this notice, DRH Health conducted a thorough review to identify affected individuals, completing this process on March 28, 2025.
Information exposed:
- Name
- Address
- Social Security number
- Date of birth
- Financial account information
- Medical-related information
Your Rights and Next Steps
If you received a notification letter from DRH Health, or if you believe you may have been affected by this data breach, there are important steps you can take to protect yourself and your information.
DRH Health is offering the following support to potentially affected individuals:
- Access to Single Bureau Credit Monitoring, Credit Report, and Credit Score services at no charge for 12 months
- Proactive fraud assistance and remediation services through a third-party vendor
You are encouraged to remain vigilant by regularly reviewing your account statements and monitoring your free credit reports for any suspicious activity. Under U.S. law, you are entitled to one free credit report per year from each of the three major credit bureaus.
You also have the right to:
- Place a fraud alert on your credit file at no cost, which requires businesses to verify your identity before extending new credit
- Place a credit freeze on your credit report, preventing credit bureaus from releasing your information without your authorization (this is also free of charge)
Contact information for the major credit bureaus is included in the official notice from DRH Health. If you experience identity theft or fraud, you have the right to file a police report and should also report incidents to your state Attorney General and the Federal Trade Commission.
You May Be Entitled to Compensation
If your personal information was exposed in the Duncan Regional Hospital data breach, you may be eligible for compensation. Lawyers are ready to help you understand your rights and pursue a claim related to this incident.
To find out if you qualify and to join a lawsuit, complete the below form. This is a no-cost, no-obligation way to take the next step in protecting yourself and seeking compensation for any harm caused by this data breach.