HopeHealth Data Breach Exposes Sensitive Patient Information in March 2025 Incident HopeHealth, a healthcare provider, disclosed a data breach in which unauthorized access to sensitive personal and health information may have occurred. On March 20, 2025, the organization detected suspicious activity within its network and initiated an investigation. The breach, which took place between March 19 and March 20, 2025, potentially exposed a wide range of data, including names, Social Security numbers, addresses, dates of birth, medical records, insurance details, prescription information, and financial data such as credit/debit card numbers. The review of affected records was completed on November 21, 2025, with impacted individuals notified via mail beginning in early December. HopeHealth published a breach notice on its website on December 4, 2025, detailing the incident and offering complimentary credit monitoring services to those affected. The exposed data varies by individual, encompassing both personally identifiable information (PII) and protected health information (PHI). The full scope of the breach remains under investigation.