Emergency Responders Health Center (ERHC), a specialized medical provider for firefighters, police officers, EMS/EMT personnel, and other first responders, suffered a cybersecurity breach in September 2025. An unauthorized cybercriminal gained access to systems containing personally identifiable information (PII) of an undetermined number of individuals, including emergency response personnel. The exposed data may include sensitive personal and medical records, though the exact scope of the compromise remains unclear.The incident has prompted a legal investigation by Lynch Carpenter, LLP, a national class-action law firm, which is assessing potential claims for affected individuals. Victims who received breach notifications may be eligible for compensation, indicating the incident’s seriousness in terms of data privacy violations and potential downstream risks, such as identity theft or fraud. The breach underscores vulnerabilities in healthcare data security, particularly for organizations handling high-risk professional groups like first responders. ERHC has not disclosed whether ransomware was involved, but the focus on PII exposure suggests a targeted attack aimed at exploiting sensitive personal data.

Emergency Responders Health Center (ERHC), a medical provider specializing in healthcare for first responders, suffered a data breach after cybercriminals compromised several internal email accounts between December 11, 2024, and April 11, 2025. The breach exposed sensitive personally identifiable information (PII) and protected health information (PHI) of current and former patients, including names, addresses, dates of birth, Social Security numbers, driver’s license copies, health insurance details, medical records, and payment information. The incident was detected on April 11, 2025, but public disclosure occurred only on July 25, 2025, with affected individuals notified by mail on September 26, 2025. The breach was reported to the Montana Attorney General’s office, and ERHC offered 12 months of free credit monitoring and identity restoration services to victims. Legal firms are investigating potential compensation claims for affected individuals due to risks of identity theft, financial fraud, and unauthorized use of medical data.