Mountain Valley Regional Rehabilitation Hospital Data Breach
The Lyon Firm is investigating the data breach incident at Ernest Health and Mountain Valley Regional Rehabilitation Hospital on behalf of California plaintiffs. Our lawyers are available for a free consultation and case review. We are currently filing data privacy lawsuits following cyberattacks and data theft events.
What Happened at Mountain Valley Regional?
Ernest Health, a large operator of rehabilitation and long-term acute care hospitals in Arizona, California, Colorado, Idaho, Indiana, Montana, New Mexico, Ohio, South Carolina, Texas, Utah, Wisconsin, and Wyoming, began notifying patients last month about a recent data security incident that may have compromised the personal and protected health information of thousands of individuals.
Ernest identified unauthorized activity on its network in February 2024, confirmed there had been unauthorized access to files with patient data. Reports suggest the unauthorized party accessed and and possibly acquired files that contained the following information:
- Name
- Social Security number
- Date of birth
- Driver’s license number
- Taxpayer identification number
- Username and password
- Biometric data
- Medical treatment and/or diagnosis information
- Health insurance information
On March 29, 2024, Ernest began mailing data breach notification letters to patients whose information may have been impacted. VMRC is a system of healthcare centers based in Stockton, California and serves individuals with developmental disabilities in San Joaquin, Stanislaus, Amador, Calaveras, and Tuolumne counties.
On August 1, 2023, Valley Mountain Regional allegedly first discovered that it had experienced a data breach in which sensitive personal identifiable information had been leaked. It is unclear why they did not begin notifying individuals until April 19, 2024.
Contact an experienced data privacy attorney following any notice of data theft. We offer free consultations and case reviews. Call now to learn more about your legal options, and to discuss filing a class action claim. It is important to understand the risks of fraud and identity theft following a data breach incident.