Covenant Health Data Breach Investigation
Chimicles Schwartz Kriner & Donaldson-Smith is investigating potential class action claims against Covenant Health, Inc., a non-profit Catholic healthcare organization, for a data security incident that may have impacted the personal information of over 478,000 individuals.
What Happened at Covenant Health?
On May 18, 2025, an unauthorized third party gained access to Covenant Health’s IT environment and accessed patients’ sensitive personal information. Covenant Health discovered the breach on May 26, 2025, and engaged forensic specialists to investigate. The organization first disclosed the breach on July 11, 2025.
The investigation concluded on December 10, 2025, and Covenant Health began to notify impacted individuals on December 31, 2025.
What Information Was Compromised?
-
Names
- Addresses
- Dates of birth
- Medical record numbers
- Social Security numbers
- Health insurance information
- Treatment information, such as diagnoses, dates of treatment, and type of treatment
The exposure of this sensitive information places affected individuals at a significantly increased risk of identity theft, financial fraud, medical identity theft, and other related harms. The compromised data can be exploited by criminals for years to come.
What Should You Do?
(*) Indicates required field: When communicating with us through this site or otherwise in connection with a matter for which we do not already represent you, your communication may not be treated as privileged or confidential, and does not create an attorney-client relationship between you and our Firm.



