Covenant Health Data Breach: 478,000 Patients Affected
- The Covenant Health association has revised to nearly 500,000 the number of individuals affected by a data breach discovered last May.
- The healthcare entity initially reported in July that the data of 7,864 people had been exposed, but further analysis has revealed a larger impact.
- After completing "the bulk of its data analysis," Covenant Health now says that 478,188 individuals were affected.
“`html
Covenant Health data Breach Affects Nearly 500,000 Individuals
Table of Contents
The Covenant Health association has revised to nearly 500,000 the number of individuals affected by a data breach discovered last May.
The healthcare entity initially reported in July that the data of 7,864 people had been exposed, but further analysis has revealed a larger impact.
After completing “the bulk of its data analysis,” Covenant Health now says that 478,188 individuals were affected.
Covenant Health is a Catholic healthcare provider based in Andover, Massachusetts, operating hospitals, nursing and rehabilitation centers, assisted living residences, and elder care organizations across New England and parts of Pennsylvania.
Qilin Ransomware Attack
Covenant Health learned on May 26, 2025, that an attacker had breached its systems eight days earlier, on May 18, and gained access to patient data.
In late June,the qilin ransomware group claimed the attack,stating that it had stolen 852 GB of data comprising nearly 1.35 million files.
source: BleepingComputer
The organization says the exposed details may include names, addresses, dates of birth, medical record numbers, health insurance information, and Social Security numbers.
What Data Was Compromised?
The possibly compromised data includes a wide range of Personally identifiable Information (PII) and Protected Health Information (PHI). This includes:
- Names
- Addresses