PITTSBURGH, Dec. 03, 2025 (GLOBE NEWSWIRE) -- VITAS Hospice Services, LLC (“VITAS”),1 recently announced a cybersecurity incident, which impacted the personal information of countless individuals. Lynch Carpenter, LLP is investigating claims against VITAS related to this data breach. For an attorney to review your case, visit our site HERE. In the incident, an unauthorized person gained access to VITAS’s network and may have acquired records containing personally identifiable information (“PII”) and protected health information (“PHI”) that includes individuals’ names in combination with: • address • date of birth • Social Security number • driver’s license number • insurance information • medical information such as diagnosis, medications, and lab results If your information was impacted in this incident, you may be entitled to compensation. For an attorney to review your case, visit our site HERE. If you have received any other data breach notice letters in the last 30 days, please contact us here. About Lynch Carpenter Lynch Carpenter is a national class action law firm with offices in Pennsylvania, California, and Illinois. Our firm has represented millions of clients in data privacy matters for more than a decade and has earned national acclaim for complex litigation for plaintiffs across the country. To learn more, please visit www.lynchcarpenter.com. For more information, please call Jerry Wells at (412) 322-9243, or email him at [email protected]. _____

Vitas Healthcare Data Breach Exposes Personal Information of Over 300,000 Individuals Vitas Healthcare, the largest for-profit hospice provider in the U.S. and a subsidiary of Chemed, disclosed a cybersecurity incident affecting more than 300,000 individuals. The breach was first detected on October 24, though unauthorized access to Vitas systems began as early as September 21 and persisted until October 27. According to a data breach notice posted on November 21, attackers infiltrated Vitas’ network using a compromised vendor account. During the intrusion, the threat actor exfiltrated sensitive personal and medical data, including names, addresses, phone numbers, dates of birth, driver’s license numbers, Social Security numbers (SSNs), insurance details, medical records, and next-of-kin contact information. The U.S. Department of Health and Human Services (HHS) breach tracker confirms that 319,177 individuals were impacted. While the incident bears hallmarks of a ransomware attack, no known ransomware group has claimed responsibility, and Vitas has not confirmed whether a ransom demand was made. Healthcare data breaches of this scale are increasingly common, with recent incidents affecting hundreds of thousands—or even millions—of patients across the sector. The Vitas breach underscores the persistent targeting of healthcare providers, where compromised vendor credentials remain a frequent attack vector.

VITAS Hospice Services, LLC, a leading U.S. hospice care provider, suffered a data breach after an unauthorized party compromised a vendor’s account, gaining access to its systems between September 21 and October 27, 2025. The intruder exfiltrated highly sensitive personal and medical data of current and former patients, including Social Security numbers, passport IDs, bank/debit card details, driver’s license numbers, medical records (ICD codes, Medicare IDs), and health savings account information.The breach exposed over 22,000 daily patients across 15 states and D.C. to risks of identity theft, financial fraud, and medical identity misuse. VITAS offered 24 months of credit monitoring, dark web surveillance, and $1M identity theft insurance via Epiq. Legal investigations are underway for potential class-action lawsuits, citing damages from emotional distress, time spent mitigating risks, and financial losses. The incident underscores vulnerabilities in third-party vendor security and the severe consequences of healthcare data exposure, particularly for a hospice provider handling end-of-life care records.

VITAS Healthcare, a Florida-based hospice provider operating in 15 states, experienced a data breach between September 21 and October 27, 2025, when an unauthorized party accessed and downloaded personal information of current and former patients via a compromised vendor account. The breach was discovered on October 24, 2025, prompting immediate containment measures, including system security reinforcement, engagement of cybersecurity experts, and law enforcement notification. While the exact number of affected individuals and the specific types of compromised data (e.g., Social Security numbers, medical records, addresses) were not disclosed, VITAS confirmed no evidence of misuse yet. As a precaution, the company offered 24 months of free credit monitoring and identity protection services, alongside a dedicated hotline and website for support. The incident underscores vulnerabilities in healthcare data security, particularly due to third-party vendor risks, and aligns with a broader trend of rising breaches in the sector (725+ large breaches reported in 2024 alone).