Horizon Healthcare RCM Data Breach Lawsuit Investigation
Were you notified that Horizon Healthcare RCM leaked your personal information? A recent cyber-attack has exposed patients’ most sensitive data—putting identities and finances at risk. Discover your rights and learn whether you can file a claim now.
FREE CASE REVIEWWhat Happened?
Between December 25 – 27, 2024, Horizon Healthcare RCM—an established revenue cycle management company for hospitals and medical practices—suffered a network intrusion. The company detected the unauthorized access on December 27 and ultimately confirmed that cyber-criminals had viewed or stolen files containing highly sensitive personal and medical information.
Although the breach occurred during the 2024 holiday period, affected individuals weren’t notified until June 27, 2025, when Horizon Healthcare RCM submitted formal notices to state regulators and mailed letters to patients.
Information Exposed
The compromised files include both personally identifiable information (PII) and protected health information (PHI):
- Names & contact details
- Social Security numbers
- Dates of birth
- Addresses and customer numbers
- Driver’s license & passport numbers
- Medical record numbers & patient identifiers
- Health insurance claims data
- Payment card, checking, or other financial account information
- Internal Horizon reference numbers
With such a broad data set exposed, victims face an elevated risk of identity theft, medical fraud, and unauthorized financial transactions.
Timeline of Events
- Dec 25 – 27, 2024: Unauthorized system access occurs.
- Dec 27, 2024: Breach discovered by Horizon Healthcare RCM.
- Jun 27, 2025: Incident reported to the Maine Attorney General and written notices mailed to impacted individuals.
Your Legal Rights & Options
Under state and federal law, patients whose data was compromised have several rights, including:
- The right to written notification describing exactly what information was exposed.
- The right to free credit monitoring or identity-protection services if offered.
- The right to pursue compensation for out-of-pocket losses, emotional distress, and time spent mitigating fraud.
Class-action investigations are underway to determine whether Horizon Healthcare RCM took adequate measures to secure its systems and whether affected individuals can claim monetary damages.
Protect Yourself Now
Even if you have not noticed suspicious activity yet, it is critical to act quickly:
- Carefully review the breach notice letter from Horizon Healthcare RCM.
- Monitor bank, credit-card, and health-insurance statements for unfamiliar transactions.
- Place a free fraud alert or credit freeze with the major credit bureaus.
- Enroll in any complimentary credit-monitoring services provided.
- Watch for phishing emails, texts, or calls posing as healthcare or financial institutions.
- Document all irregularities and costs related to the breach—this evidence supports any future claim.
How a Data Breach Lawsuit Can Help
Lawsuits hold companies accountable when insufficient cybersecurity leads to consumer harm. A successful claim may recover:
- Reimbursement for fraudulent charges and identity-theft expenses
- Compensation for time spent resolving fraud issues
- Costs for additional credit-monitoring or identity-theft services
- Emotional distress damages
- Potential statutory penalties under privacy laws
If you received a Horizon Healthcare RCM breach notice, you may qualify to join the investigation. Consult experienced counsel promptly to preserve your rights and maximize potential recovery.
CHECK ELIGIBILITYFrequently Asked Questions
What caused the Horizon Healthcare RCM data breach?
While Horizon Healthcare RCM confirmed unauthorized system access between December 25–27 2024, the company has not publicly disclosed the specific vulnerability or threat actor involved.
How many people were affected by the Horizon Healthcare RCM data breach?
Regulatory filings list at least six affected Maine residents. The nationwide total has not yet been released and is expected to be far higher, given the company’s broad client base.
Why did Horizon Healthcare RCM wait six months to notify patients?
Companies are allowed limited time to investigate and secure systems, but extended delays can increase consumer risk. The six-month gap is one factor being examined in the current lawsuit investigation.
What steps should I take if I think my Horizon Healthcare RCM data was exposed?
Immediately monitor financial accounts, place fraud alerts, review the company’s notice, enroll in offered credit monitoring, and speak with a data-breach attorney to assess your legal options.
Do I have to pay to participate in a Horizon Healthcare RCM lawsuit?
Most data-breach class actions are handled on a contingency basis—meaning attorneys advance case costs and are only paid if the case succeeds. Initial consultations are typically free.