TapestryHealth Data Breach Lawsuit Investigation

What Happened?

On November 3, 2025, TapestryHealth discovered that personal information belonging to certain patients had been accessed by an unauthorized individual. An internal investigation, completed on December 5, 2025, revealed that a contracted employee engaged in unauthorized job-sharing between November 6, 2024 and November 3, 2025, allowing an unidentified party to view patient records. The employee was immediately terminated.

The company mailed consumer notice letters on December 22, 2025.

Information Exposed

According to the official notice letter, the following data elements could have been viewed:

• Last name
• Facility name & room number
• Date(s) of admission
• Medical record number
• Provider names
• Diagnosis & treatment information
• Vitals
• Immunizations
• Medications
• Care-plan goals & progress notes

The incident did not involve Social Security numbers, health-insurance details, financial account numbers, or driver’s-license information.

Company Response

TapestryHealth reports the following remediation steps:

• Immediate termination of the involved employee
• Reduced data access for contracted workers
• Enhanced technical controls and monitoring
• Expanded employee privacy and security training

No evidence of misuse has been identified to date.

Free Credit Monitoring Offered

TapestryHealth is providing 12 months of complimentary credit-monitoring and identity-protection services through IDX. Enrollment instructions are included in the mailed notice.

Steps You Can Take Now

• Enroll in the free IDX credit-monitoring service as soon as possible.
• Review your medical records for unfamiliar entries or providers.
• Monitor explanation-of-benefits statements for unrecognized services.
• Report any suspicious activity to TapestryHealth and relevant authorities.

Download the Official Notice

Timeline of Key Events

• Nov 6, 2024: Unauthorized job-sharing activity begins
• Nov 3, 2025: Activity discovered; employee terminated
• Dec 5, 2025: Internal investigation completed
• Dec 22, 2025: Consumer notices mailed to affected patients

Company Overview

TapestryHealth provides telehealth and healthcare services to long-term care facilities in the United States.

• Website: tapestryhealth.com
• Headquarters: 99 Hawley Ln., Stratford, CT, USA
• Founded: 2017
• Industry: Healthcare Services
• Employees: 251 – 1,000
• Contact: Online form
• LinkedIn: TapestryHealth on LinkedIn
• Facebook: TapestryHealth on Facebook

Frequently Asked Questions

I received a data breach letter from TapestryHealth — what should I do?

Follow the enrollment instructions for your free IDX credit monitoring, review your medical and insurance records, and contact a data-privacy attorney to discuss potential legal claims.

How do I submit a claim related to the TapestryHealth data breach?

Gather your notice letter, any evidence of misuse, and consult an attorney experienced in healthcare data breaches to explore individual or class-action options.

Am I eligible to join a lawsuit against TapestryHealth?

Patients who received an official notice may qualify. Eligibility depends on your state’s laws and any demonstrable harm. An attorney can evaluate your specific situation.

What information did the TapestryHealth breach expose?

Potentially exposed data includes last name, facility details, admission dates, medical record numbers, provider information, diagnoses, treatments, vitals, immunizations, medications, and care-plan notes.

Did TapestryHealth offer credit monitoring, and for how long?

Yes. The company is offering 12 months of complimentary credit monitoring and identity-protection services through IDX.

How can I get the official breach notice (PDF) for TapestryHealth?

You can download it directly from the California Attorney General website using the button above or this link.

How many people were affected by the TapestryHealth breach?

TapestryHealth has not publicly disclosed the total number of impacted individuals as of December 22, 2025.