Swift Institute Data Breach Exposes Sensitive Patient Information A data breach at Swift Institute, a Nevada-based medical practice, has compromised sensitive personal and health information of patients and associated individuals. The incident was detected on January 30, 2025, after unusual network activity was identified. An investigation revealed that an unauthorized individual copied files on or around January 28, 2025, exposing a range of data, including: - Personally Identifiable Information (PII): Names, Social Security numbers, driver’s license/state ID numbers, dates of birth, financial account details, and credit/debit card information. - Protected Health Information (PHI): Medical records, health insurance details, and digital signatures. Swift Institute completed its review of the impacted data on December 4, 2025, and began notifying affected individuals shortly after. The breach was reported to the California Attorney General on December 12, 2025, and the company published a Notice of Data Event on its website. In response, Swift Institute engaged legal counsel and third-party forensic specialists to assess the breach. Affected individuals are being offered 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout (a TransUnion company), including single-bureau credit monitoring, reports, and scores. Enrollment must be completed within 90 days of receiving notification. The company has also provided guidance on fraud alerts, credit freezes, and credit report monitoring, along with a dedicated assistance line (833-844-8151) for support. The breach underscores the risks of unauthorized access to both PII and PHI, highlighting the need for heightened vigilance in monitoring financial and medical records.