Healthcare Services Group, Inc.

Healthcare Services Group, Inc. (HSGI) notified the Rhode Island Attorney General of a data event affecting 3,628 RI residents. Unauthorized access occurred between Sept 27 and Oct 3, 2024; discovered Oct 7, 2024. Exposed data included names, SSNs, driver’s licenses, financial/health info. HSGI notified law enforcement, offered 12 months of Experian credit monitoring, and implemented additional security safeguards.

Healthcare Services Group, Inc based in Bensalem, Pennsylvania, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-06-03 and reported on 2025-08-26. 82,280 Texas residents were affected. 624,496 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information. Consumers were notified via U.S. Mail.

Healthcare Services Group, Inc. (HSGI) disclosed unauthorized access to its computer systems between September 27 and October 3, 2024. An unauthorized actor accessed and copied files containing personal information, including names and other data elements. HSGI secured systems, engaged in investigation, notified law enforcement and regulators, and offered credit monitoring services to affected individuals.

Healthcare Services Group, Inc. (HSGI) notified the New Hampshire Attorney General of a data event affecting 4,943 NH residents. Unauthorized access occurred between Sept 27 and Oct 3, 2024; discovered Oct 7, 2024. Exposed data included names, SSNs, driver's licenses, and financial account info. HSGI secured systems, engaged law enforcement, notified regulators, and provided 12 months of Experian credit monitoring.

Healthcare Services Group, Inc. (HSGI) disclosed a data breach affecting approximately 4,026 Nebraska residents. Unauthorized access occurred between September 27 and October 3, 2024, with discovery on October 7, 2024. Affected data included names, SSNs, driver’s license numbers, financial account information, full access credentials, and biometric identifiers. HSGI notified federal law enforcement, provided 12 months of credit monitoring via Experian, and implemented additional security safeguards and employee training. Notification to residents was sent on or about August 25, 2025.

Healthcare Services Group, Inc reported a data breach to the Oregon Attorney General. The breach was reported on 2025-08-25. The breach occurred during 9/27/2024 - 10/3/2024. The breach was discovered on 6/3/2025. 624,496 individuals were affected. Notice was sent on 8/25/2025.

Healthcare Services Group, Inc. disclosed a ransomware incident affecting Washington residents. Unauthorized access occurred between September 27 and October 3, 2024. The company discovered the breach on October 7, 2024, and notified 7,745 Washington residents on August 25, 2025. Compromised data included names, SSNs, DOBs, driver's licenses, financial accounts, PHI, credentials, and biometric identifiers.

Healthcare Services Group, Inc. (HSGI) notified Montana residents of unauthorized access to its computer systems between September 27 and October 3, 2024. HSGI discovered the incident on October 7, 2024. The breach potentially exposed names and other personal information. HSGI secured systems, engaged in investigation, notified law enforcement and regulators, and offered credit monitoring services.

Healthcare Services Group, Inc. (HSGI) disclosed a data breach where an unauthorized actor accessed and copied files between September 27 and October 3, 2024. The incident was discovered on October 7, 2024. Impacted data includes names and government identifiers. HSGI secured systems, engaged in investigation, notified regulators and law enforcement, and offered credit monitoring services to affected individuals.

Healthcare Services Group, Inc. (HSGI) disclosed a data incident involving unauthorized access to its computer systems between September 27, 2024, and October 3, 2024. The breach potentially exposed names and government identifiers (Social Security numbers, dates of birth) of individuals. HSGI secured systems, engaged in a comprehensive investigation, notified federal law enforcement and regulators, and offered credit monitoring services to affected individuals.

Healthcare Services Group Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-09-27 and was reported on 2025-08-25. 17,490 Indiana residents were affected. 624,496 individuals affected in total.

Healthcare Services Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-08-25. 25,583 Massachusetts residents were affected.

Healthcare Services Group, Inc. reported unauthorized access to its computer systems between September 27 and October 3, 2024. The company discovered the incident on October 7, 2024. An unauthorized actor accessed and copied files containing personal information, including names and other data elements. HSGI secured systems, conducted an investigation, notified regulators and law enforcement, and is offering credit monitoring to affected individuals.

HEALTHCARE SERVICES GROUP, INC filed a data-breach notice with the Illinois Attorney General in August 2025 (case 25-08-398). The register records the breach as discovered on June 3, 2025. Personal information types reported: biometric data, drivers license, financial account number, medical information, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Revenue:$1.7 Billion - Country :USA

Healthcare Services Group, Inc. (HCSG) filed an 8-K on October 16, 2024, reporting a cybersecurity incident identified on October 9, 2024. The incident involved unauthorized activity within some of its systems. The Company activated its incident response process, engaged third-party cybersecurity experts, and notified law enforcement. As of the filing date, the full scope was unknown, and the Company did not expect a material financial effect. The incident status is active.