Aspire Rural Health System Data Breach Affects Over 138,000 Patients and Staff Members

Strategic Insights -

The law firm of Edelson Lechtzin LLP is investigating data privacy claims regarding a data breach incident at Aspire Rural Health System, which occurred between November 4, 2024, and January 6, 2025. The breach affected more than 138,386 patients and staff members, compromising sensitive personal data including names, dates of birth, Social Security numbers, and medical treatment details. The cybercriminal organization BianLian group claimed responsibility for the breach on February 13, 2025.

Key Takeaways:

  • The data breach at Aspire Rural Health System occurred between November 4, 2024, and January 6, 2025, affecting more than 138,386 patients and staff members.
  • The compromised personal data includes names, dates of birth, Social Security numbers, financial account and routing numbers, medical treatment and diagnosis details, prescription data, health insurance information, payment card and PIN numbers, expiration dates, lab results, provider details, driver's license numbers, passwords and usernames, biometric identifiers, patient IDs, medical record numbers, and passport numbers.
  • Aspire Rural Health System is a nonprofit organization founded in 2024, serving Michigan's Thumb region with coordinated care through hospitals, clinics, and provider networks across Huron, Sanilac, Tuscola, and Lapeer counties.
  • Edelson Lechtzin LLP is investigating a class action lawsuit to seek legal remedies for individuals whose sensitive personal data may have been compromised by the Aspire data breach.
  • Individuals affected by the breach should take steps to protect themselves against identity theft and fraud by regularly reviewing their account statements and monitoring their credit reports for any suspicious or unauthorized activity.

Statistics:

  • Number of affected patients and staff members: 138,386
  • Period of data breach: November 4, 2024, to January 6, 2025
  • Type of compromised personal data:

+ Names: N/A

+ Dates of birth: N/A

+ Social Security numbers: N/A

+ Financial account and routing numbers: N/A

+ Medical treatment and diagnosis details: N/A

+ Prescription data: N/A

+ Health insurance information: N/A

+ Payment card and PIN numbers: N/A

+ Expiration dates: N/A

+ Lab results: N/A

+ Provider details: N/A

+ Driver's license numbers: N/A

+ Passwords and usernames: N/A

+ Biometric identifiers: N/A

+ Patient IDs: N/A

+ Medical record numbers: N/A

+ Passport numbers: N/A

Sources:

  • Edelson Lechtzin LLP
  • Aspire Rural Health System
  • BianLian group (cybercriminal organization)
  • PR Newswire (press release)