Wood River Health Data Breach Lawsuit Investigation
Did Wood River Health just tell you your Social Security number and medical data were exposed? A single compromised email account leaked highly sensitive information for nearly 55,000 people. Find out how to protect yourself and whether you can claim compensation below.
Key Takeaways
- Breach window: Aug. 8, 2024 – Sept. 6, 2024 (employee email account compromised)
- Discovery date: May 29, 2025
- Total affected: 54,926 U.S. individuals (including residents of Maine, Massachusetts, Vermont and others)
- Sensitive data exposed: Social Security numbers, medical records, financial details, login credentials and more
- Free services offered: 12 months of credit monitoring & identity restoration via Cyberscout
What Happened?
According to filings with several state attorneys general, Wood River Health detected unauthorized activity in one employee’s email account. An investigation found that an outside actor had continual access from August 8 through September 6, 2024. Because the mailbox contained both patient and employee files, the intruder could have viewed or downloaded sensitive personally identifiable information (PII) and protected health information (PHI).
Information Potentially Involved
The compromised mailbox held an unusual breadth of data:
Personally Identifiable Information (PII)
- Full name & address
- Social Security number
- Date of birth
- Government-issued IDs & employer ID numbers
- Account numbers (with and without routing numbers)
- Electronic or digital signatures
- Usernames, passwords, PINs
Protected Health Information (PHI)
- Diagnosis and treatment details
- Encounter numbers & patient account numbers
- Prescription / medication information
- Medical record numbers & billing/claims data
- Health-insurance group & subscriber numbers, Medicare/Medicaid IDs
- Treating or referring physician information
Wood River Health’s Response
The health center has started mailing written notices (beginning July 28, 2025) and is offering one year of complimentary credit monitoring and identity-restoration services through Cyberscout, a TransUnion subsidiary. Impacted individuals can call the dedicated assistance line at 833-397-4705 (Mon–Fri, 8 a.m.–8 p.m. ET) or write to 823 Main St., Hope Valley, RI 02832 for further help.
Download Official Breach Notice (PDF)What You Should Do Now
If you received a notice—or even suspect you may be impacted—take these steps immediately:
- Activate the free Cyberscout monitoring offered in your letter to detect suspicious credit activity.
- Pull your free annual credit reports from AnnualCreditReport.com and scour them for unfamiliar accounts.
- Consider a fraud alert or credit freeze with Equifax, Experian and TransUnion to block new credit lines in your name.
- Check medical insurance statements for unrecognized services or prescriptions.
- Document any time or money spent handling the fallout—these records may support a legal claim.
Potential Lawsuits & Compensation
Under state and federal privacy laws, organizations that fail to adequately safeguard PII/PHI can be held liable for resulting damages. Victims of the Wood River Health data breach may be able to pursue:
- Reimbursement for unauthorized charges or medical expenses
- Payment for time spent addressing identity theft risks
- Future credit-monitoring or identity-theft protection costs
- Statutory damages where applicable
Important: Most data-breach claims are handled through class actions with strict filing deadlines. If you were notified, consult qualified counsel promptly to preserve your rights.
Frequently Asked Questions
What happened in the Wood River Health data breach?
An unauthorized party accessed a Wood River Health employee’s email account between August 8 and September 6, 2024 and may have viewed or downloaded sensitive personal and medical data for 54,926 people.
What information was exposed by Wood River Health?
Exposed data includes names, Social Security numbers, dates of birth, financial account details, usernames/passwords, diagnoses, treatment information, insurance numbers and more.
How do I know if I am affected by the Wood River Health breach?
Wood River Health began mailing notice letters on July 28, 2025. If your data was involved, you should receive a letter. You can also call 833-397-4705 to inquire.
Is Wood River Health offering free credit monitoring?
Yes. Impacted individuals receive 12 months of complimentary credit monitoring and identity-restoration services through Cyberscout.
Can I sue Wood River Health for the data breach?
Possibly. Individuals whose personal information was compromised may be eligible to seek compensation through a class action or individual lawsuit. Deadlines apply, so act quickly.
What steps should I take after the Wood River Health data breach?
Enroll in the free monitoring, review credit reports, consider a credit freeze, monitor medical/insurance statements and keep records of any fraud or time spent addressing the breach.
Stay Vigilant
While Wood River Health works to bolster its security, the burden of monitoring falls on victims. Staying proactive is the best defense against fraud and identity theft.
Attorney Advertising. Prior results do not guarantee a similar outcome.