Laurel Health Centers Reports Data Breach Impacting Patient Information On January 23, 2026, Laurel Health Centers (LHC), a Pennsylvania-based provider of medical, dental, and chiropractic services, disclosed a cybersecurity incident involving unauthorized access to its network. The breach potentially exposed sensitive personal and health-related data of an undisclosed number of individuals. The compromised information may include: - Names, dates of birth, and Social Security numbers - Contact details and insurance information - Medical records (diagnoses, treatments, procedures, provider details, and service dates) - Behavioral health and immunization data - Financial information, such as checking account or credit card numbers Lynch Carpenter, LLP, a national class action law firm, is investigating potential legal claims against LHC in connection with the breach. The firm has previously represented clients in data privacy cases and is reviewing claims for affected individuals. No further details on the breach’s scope, timing, or attribution have been released. The incident underscores ongoing risks to healthcare data security.

Laurel Health Centers Suffers Major Data Breach Exposing Sensitive Patient Information On July 14, 2025, Laurel Health Centers a network of Federally Qualified Health Centers (FQHCs) serving northern Pennsylvania detected unusual activity in its email environment. An investigation revealed that an unauthorized actor had accessed multiple email accounts between July 11 and July 25, 2025, potentially viewing or exfiltrating sensitive patient data. The breach exposed a wide range of personally identifiable information (PII) and protected health information (PHI), including names, dates of birth, Social Security numbers, addresses, medical records, insurance details, treatment histories, financial data (such as credit card and bank account numbers), and behavioral health records. The threat actor remained undetected for nearly two weeks, during which time files may have been copied in addition to being accessed. Laurel Health Centers completed its review of impacted data on December 30, 2025, before initiating notifications to affected individuals and regulatory agencies. The organization is offering free credit monitoring and identity protection services to those whose information was compromised, with a dedicated assistance line for concerned individuals. The incident underscores the risks of prolonged unauthorized access in healthcare systems, where sensitive data remains a prime target for cyber threats.