COVENANT HEALTH

Covenant Health, Inc. based in Andover, Massachusetts, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-26 and reported on 2026-01-05. 1,101 Texas residents were affected. 478,188 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Covenant Health, Inc. reported a data security incident where an unauthorized party gained access to its IT environment on May 18, 2025. The organization detected unusual activity on May 26, 2025, and contained the incident. Affected data includes patient names, addresses, dates of birth, medical record numbers, health insurance information, and treatment details. Third-party forensic specialists were engaged to investigate. No specific malware or threat actor was identified.

Covenant Health, Inc. notified South Carolina AG of a data breach where an unauthorized party accessed patient IT systems starting May 18, 2025. Incident discovered Dec 10, 2025. Affected data includes names, SSNs, DOBs, medical record numbers, and PHI. Covenant engaged forensic specialists, enhanced IT security, and offered 1-year Experian IdentityWorks.

Covenant Health, Inc. notified patients of a data security incident where an unauthorized party accessed the IT environment starting May 18, 2025. The breach exposed PHI, SSNs, and PII. Covenant engaged forensic specialists, enhanced IT security, and offered one year of Experian IdentityWorks to affected individuals.

COVENANT HEALTH, INC. filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-699). The register records the breach as discovered on May 26, 2025. Personal information types reported: medical information, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Covenant Health, Inc. filed a supplemental notification with the New Hampshire Attorney General regarding a data security incident. An unauthorized party accessed the IT environment on May 18, 2025, after unusual activity was detected on May 26, 2025. The breach affected 154,188 New Hampshire residents, exposing names, addresses, DOBs, SSNs, medical record numbers, and treatment information. Covenant Health engaged forensic specialists, notified law enforcement, and offered one year of Experian IdentityWorks to affected individuals. Notifications were mailed on December 31, 2025.

Covenant Health, Inc. reported an external system breach (hacking) occurring on May 18, 2025, discovered on May 26, 2025. The incident affected 478,188 individuals, including 284,529 Maine residents. Affected data included names and personal identifiers combined with government-issued identifiers. Covenant Health sent written notifications starting July 11, 2025, and provided 12 months of identity monitoring and restoration services through Experian.

Covenant Health, Inc. reported a cybersecurity incident to the Nebraska Attorney General. An unauthorized party gained access to the IT environment on May 18, 2025. The breach affected 41 Nebraska residents, exposing names, addresses, DOBs, SSNs, medical record numbers, and treatment information. Covenant Health engaged forensic specialists, notified law enforcement, enhanced IT security, and offered credit monitoring to affected individuals.

Covenant Health, Inc. notified consumers of a data breach where an unauthorized party accessed its IT environment starting May 18, 2025. The incident exposed patient information including names, addresses, SSNs, medical record numbers, and health insurance details. Covenant Health engaged forensic specialists, enhanced IT security, and offered one year of Experian IdentityWorks to affected individuals.

Covenant Health, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-07-11. 15,860 Massachusetts residents were affected.

Covenant Health reported to HHS on 2025-07-11 a Hacking/IT Incident affecting 7864 individuals. Breached information located on Network Server. Business associate present.

Covenant Health, Inc. notified the NH Attorney General of a data breach affecting 2,269 New Hampshire residents. Unauthorized access occurred May 18, 2025; detected May 26, 2025. Patient PII, including SSNs, names, and PHI was accessed. Covenant engaged forensic specialists, enhanced IT security, and offered 1-year Experian IdentityWorks memberships.

Covenant Health, Inc. reported an external system breach (hacking) on May 18, 2025, discovered on May 26, 2025. The incident affected 7,864 individuals, including 4,659 Maine residents. Compromised data included names, SSNs, DOBs, medical record numbers, and treatment information. Covenant Health engaged forensic specialists, notified law enforcement, and offered 12 months of Experian credit monitoring.

Covenant Health of Tewksbury, Mass, an innovative, Catholic regional health delivery network and a leader in values-based, not-for-profit health and eldercare. Covenant Health consists of hospitals, skilled nursing and rehabilitation centers, ...