Aspire Rural Health System Data Breach Affects 138,386 Patients
Aspire Rural Health System, a Michigan-based health system, has announced a data breach affecting 138,386 patients. The breach occurred when an unauthorized third party accessed and acquired files from the system's systems between November 4, 2024, and January 6, 2025. The compromised information includes sensitive patient data, such as Social Security numbers, financial account numbers, and medical treatment and diagnosis information. Aspire Health failed to notify affected individuals until on or around August 20, 2025, potentially violating state and federal laws.
Key Takeaways:
- The data breach affected 138,386 patients of Aspire Rural Health System, a Michigan-based health system consisting of over 70 providers.
- The breach occurred between November 4, 2024, and January 6, 2025, when an unauthorized third party accessed and acquired files from Aspire Health's systems.
- The compromised information includes sensitive patient data, such as:
+ First and last names
+ Dates of birth
+ Social Security numbers
+ Financial account numbers and routing numbers
+ Medical treatment and diagnosis information
+ Prescription information
+ Individual health insurance information
+ Payment card numbers and access PIN numbers
+ Payment card expiration dates
+ Lab results
+ Provider information
+ Driver's license numbers
+ Password and usernames
+ Biometric identifiers
+ Patient identification numbers
+ Medical record numbers
+ Passport number
- Aspire Health notified affected individuals on or around August 20, 2025, which may have violated state and federal laws.
- Affected individuals may be at risk of identity theft and other serious violations of their privacy.
- Aspire Health patients may be entitled to money damages and an injunction requiring changes to the company's cybersecurity practices.
Statistics:
- 138,386 patients affected
- November 4, 2024, to January 6, 2025: period during which the breach occurred
- August 20, 2025: date on which Aspire Health notified affected individuals
- Over 70 providers under Aspire Rural Health System
Sources:
- Schubert Jonckheer & Kolbe LLP
- Aspire Rural Health System
- Schubert Jonckheer & Kolbe LLP website