Ascension Health Data Breach Impacts Patients in Five States
CohenMalad, LLP is investigating a new data breach involving nearly 115,000 individuals who entrusted private information to Ascension Health Care, one of the largest healthcare systems in the United States. This marks yet another serious cybersecurity failure related to Ascension, this time affecting patients in Alabama, Michigan, Indiana, Tennessee and Texas.
According to recent reports, the breach occurred in December 2024 when Ascension “inadvertently disclosed information” to a former business partner. That third-party vendor, Cleo, was later targeted in a cyberattack by the Cl0p ransomware gang. In January 2025 investigators confirmed that there had been unauthorized access to highly sensitive patient data.
If you received a letter from Ascension informing you of this new data breach, you likely qualify to join a related class action lawsuit.
Join Ascension Data Breach Lawsuit
Significant Private Information Compromised
The combination of medical and financial identifiers in the Ascension data breach places victims at high risk for identity theft, insurance fraud and other long-term consequences. Ascension confirmed that the exposed data includes:
- Full names, addresses, phone numbers, email addresses
- Dates of birth, race, and gender
- Social Security numbers
- Clinical information related to inpatient care, including:
- Admission and discharge dates
- Places of service
- Physician names
- Diagnoses and billing codes
- Insurance company names
- Medical record numbers
CohenMalad, LLP is actively investigating whether Ascension failed in its legal and ethical duty to safeguard the sensitive health and personal information of patients. Entrusting third-party vendors with patient data comes with a responsibility to ensure that robust cybersecurity measures are in place. Based on public statements and disclosures, Ascension’s actions may have directly contributed to the breach by mishandling data and allowing it to fall into the wrong hands.
Report This Incident Today
If you are a patient who received a data breach notification letter from Ascension Health Care, you may be entitled to financial compensation and legal protection under state and federal laws.
Our legal team has decades of experience representing victims of healthcare data breaches in class action lawsuits across the country. We are committed to helping you hold Ascension accountable.
