COVENANT HEALTH

Covenant Health, Inc. based in Andover, Massachusetts, a healthcare – medical provider entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-05-26 and reported on 2026-01-05. 1,101 Texas residents were affected. 478,188 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Covenant Health, Inc. reported a data security incident where an unauthorized party gained access to its IT environment on May 18, 2025. The organization detected unusual activity on May 26, 2025, and contained the incident. Affected data includes patient names, addresses, dates of birth, medical record numbers, health insurance information, and treatment details. Third-party forensic specialists were engaged to investigate. No specific malware or threat actor was identified.

Covenant Health, Inc. notified South Carolina AG of a data breach where an unauthorized party accessed patient IT systems starting May 18, 2025. Incident discovered Dec 10, 2025. Affected data includes names, SSNs, DOBs, medical record numbers, and PHI. Covenant engaged forensic specialists, enhanced IT security, and offered 1-year Experian IdentityWorks.

Covenant Health, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2026-01-02. The breach occurred from 05/18/2025 to 05/26/2025. 76 Montana residents were affected.

Covenant Health, Inc. filed a supplemental notification with the New Hampshire Attorney General regarding a data security incident. An unauthorized party accessed the IT environment on May 18, 2025, after unusual activity was detected on May 26, 2025. The breach affected 154,188 New Hampshire residents, exposing names, addresses, DOBs, SSNs, medical record numbers, and treatment information. Covenant Health engaged forensic specialists, notified law enforcement, and offered one year of Experian IdentityWorks to affected individuals. Notifications were mailed on December 31, 2025.

Covenant Health, Inc. reported an external system breach (hacking) occurring on May 18, 2025, discovered on May 26, 2025. The incident affected 478,188 individuals, including 284,529 Maine residents. Affected data included names and personal identifiers combined with government-issued identifiers. Covenant Health sent written notifications starting July 11, 2025, and provided 12 months of identity monitoring and restoration services through Experian.

Covenant Health, Inc. notified consumers of a data breach where an unauthorized party accessed its IT environment starting May 18, 2025. The incident exposed patient information including names, addresses, SSNs, medical record numbers, and health insurance details. Covenant Health engaged forensic specialists, enhanced IT security, and offered one year of Experian IdentityWorks to affected individuals.

Covenant Health, Inc. notified the NH Attorney General of a data breach affecting 2,269 New Hampshire residents. Unauthorized access occurred May 18, 2025; detected May 26, 2025. Patient PII, including SSNs, names, and PHI was accessed. Covenant engaged forensic specialists, enhanced IT security, and offered 1-year Experian IdentityWorks memberships.

Covenant Health, Inc. reported an external system breach that affected 4,659 Maine residents. The breach was discovered on May 26, 2025, and occurred on May 18, 2025. In response, the company is offering 12 months of identity monitoring services through Experian.