US HealthConnect Data Breach Lawsuit Investigation
Has your Social Security number or bank data been exposed? On January 25 2025, US HealthConnect uncovered suspicious activity on its systems—activity that later proved to be a full-scale data breach. Find out how to protect yourself and whether you can pursue compensation.
What Happened?
US HealthConnect, Inc., a Pennsylvania-based healthcare education and digital-media company, detected unauthorized access to its internal network on January 25, 2025. A forensic investigation concluded that an unknown actor infiltrated servers containing sensitive personal information. The incident was reported to the Massachusetts Attorney General and notification letters were mailed beginning September 4 2025.
Type of Information Exposed
- Full names
- Social Security numbers
- Dates of birth
- Postal addresses
- Driver’s license or state ID numbers
- Medical and health-related information
- Financial account details
Who Is Affected?
While the company has not released a nationwide total, the breach notice confirms at least 50 residents of Massachusetts and 4 residents of Rhode Island were affected. Anyone who receives a letter from US HealthConnect—or from subsidiaries such as Global Learning Collaborative, ReachMD, or Avenue Live—should assume their data may be at risk.
Your Immediate Next Steps
- Enroll in free credit monitoring: US HealthConnect is offering Experian IdentityWorks for affected individuals.
- Check your accounts: Review bank, credit-card, and insurance statements for unfamiliar activity.
- Place a fraud alert or credit freeze: Contact any of the three major bureaus to make it harder for fraudsters to open new accounts.
- Watch for phishing: Treat unsolicited calls or emails that request sensitive data with heightened skepticism.
Can You File a Lawsuit?
If your personally identifiable information (PII) or protected health information (PHI) was compromised, you may be entitled to recover:
- Reimbursement of out-of-pocket expenses for credit-monitoring, identity-theft services, or banking fees
- Compensation for time spent addressing fraud or securing accounts
- Damages for emotional distress and loss of privacy
- Enhanced security measures to prevent future breaches
Class-action and mass-arbitration claims are being evaluated. Legal teams will review your notice letter and documentation to confirm eligibility.
How to Protect Yourself Moving Forward
- Annual credit reports: Request your free reports at AnnualCreditReport.com and dispute any errors immediately.
- Enable multi-factor authentication (MFA): Add an extra layer of security to email, banking, and social-media accounts.
- Monitor medical records: Ask your healthcare providers for an “explanation of benefits” (EOB) to spot fraudulent claims.
- Update passwords: Use a password manager to generate and store unique, complex passwords.
Contact Information
US HealthConnect has set up a dedicated assistance line at 833-931-9555, available Monday–Friday, 8 a.m.–8 p.m. CT. Email inquiries can be sent to privacy@ushealthconnect.com.
Frequently Asked Questions
What data was compromised in the US HealthConnect breach?
Names, dates of birth, Social Security numbers, postal addresses, driver’s license or state ID numbers, financial account data, and certain medical information were exposed.
How do I know if I am part of the US HealthConnect data breach?
US HealthConnect mailed notification letters starting September 4 2025. Check your mail and email for a notice or contact the dedicated assistance line if you suspect exposure.
Is US HealthConnect offering free credit monitoring?
Yes. Impacted individuals can enroll in Experian IdentityWorks at no cost, as detailed in the breach letter.
Can I sue US HealthConnect for the data breach?
Potentially. Victims may seek compensation through individual or class-action claims for financial losses, time spent, and emotional distress.
Does this breach include subsidiaries like ReachMD?
Yes. If your data was held by any US HealthConnect subsidiary—including ReachMD, Global Learning Collaborative, or Avenue Live—you are part of the same incident and enjoy identical rights.