Revere Health and Health Management Systems of America Confirm Data Breaches Impacting Thousands Two major healthcare organizations—Revere Health in Utah and Health Management Systems of America (HMSA) in Michigan—have recently disclosed cyberattacks exposing patient data. ### Revere Health Breach (Utah) On August 11, 2025, Revere Health, the largest independent multispecialty physician group in Utah and southeastern Nevada, detected unauthorized access to a third-party payment platform used for patient and payer transactions. While no evidence of data theft or misuse was found, the breach exposed sensitive information for up to 10,800 patients, including: - Names, dates of birth, and addresses - Medical account/record numbers - Billing and insurance details - Partial Social Security numbers - Financial account information (for some individuals) Revere Health secured the system with its payment provider and implemented enhanced security measures to prevent future incidents. As a precaution, affected individuals were offered complimentary credit monitoring and identity theft protection. ### HMSA Breach (Michigan) Detroit-based Health Management Systems of America (HMSA), a behavioral healthcare provider, identified a breach on December 9, 2024, after an employee’s email account was compromised via a spear-phishing attack. The intruder accessed and downloaded emails from the account. A digital forensics firm was engaged to investigate, but the scope of exposed data and the number of affected individuals remain unclear, as the review is ongoing. HMSA will notify impacted individuals once the investigation concludes. Both incidents highlight the growing threat of cyberattacks in healthcare, particularly through third-party vulnerabilities and phishing schemes.