Horizon Healthcare RCM, a healthcare billing platform, suffered a ransomware attack in June 2024, attributed to the LockBit cybercriminal group. The attackers exfiltrated sensitive data, including protected health information (PHI), before encrypting the company’s cloud-based revenue-cycle management systems. A ransom was reportedly paid to prevent public exposure of the stolen data, though the full scope of affected clients remains undisclosed. The breach raises long-term concerns over privacy risks, regulatory penalties for healthcare providers, and operational disruptions. While systems were restored, the incident underscores vulnerabilities in third-party vendors supplying critical services to the healthcare sector. Experts highlight the need for vendor risk assessments, data encryption, and resilient system configurations to mitigate exposure to supply-chain attacks, which are increasingly targeting high-value data infrastructure.