Covenant Health, Inc., a healthcare provider in Montana, recently disclosed a data security incident that occurred on May 18, 2025. This breach was reported to the Montana Attorney General on January 2, 2026, informing patients that their sensitive personal and health information may have been compromised.
The information reported to be exposed includes your Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates. This broad spectrum of exposed data represents a significant risk to affected individuals.
The compromise of such detailed personal and health records can lead to various harms. For instance, your Social Security Number and Full Name could be used for identity theft and financial fraud, while exposed medical data might be exploited for medical identity theft, fraudulent billing, or other privacy violations. Unlike credit cards, you cannot easily change your medical history or Social Security Number once it's exposed.
As a healthcare entity, Covenant Health, Inc. is legally obligated under federal laws like HIPAA and HITECH to protect patient data with robust security measures. The occurrence of this data breach suggests that the organization may not have upheld its duty to adequately safeguard your confidential health information, potentially falling short of industry standards and legal requirements.
If you received a data breach notification letter from Covenant Health, Inc., it means your information was directly involved in this incident. Receiving this notice gives you a basis to explore your legal options. Our firm is actively investigating potential class action claims against Covenant Health, Inc. and offers a free, no-obligation case review to affected individuals, with no out-of-pocket costs unless we secure a recovery for you.