Three Rivers Hospital suffers data breach, patient information compromised

Three Rivers Hospital has suffered a data breach, potentially exposing patient information, according to a notice issued by CPS Solutions LLC. The company, which supports the hospital’s pharmacy operations, became aware of unauthorized access to an employee’s business email account on December 4, 2024. While the email was quickly secured and an investigation launched, officials confirmed that some patients’ personal information was accessed and removed.

The compromised data may include patients’ full names, dates of birth, health insurance details, and medical information related to their treatment or prescription needs. However, CPS Solutions assured affected individuals that highly sensitive details such as Social Security numbers, driver’s license numbers, credit and debit card information, bank account details, and hospital medical records were not accessed in the breach.

In response to the incident, Three Rivers Hospital and CPS Solutions have urged patients who used the hospital or its pharmacy services in late 2024 to monitor their credit and financial statements for any suspicious activity. As an added precaution, the company offers those affected two years of free credit monitoring and identity protection services. Officials also recommend that individuals review statements from healthcare providers and insurance companies to ensure all charges and account activities are legitimate.

“The company regrets this incident and any concern it may have caused anyone,” CPS Solutions said in a statement. “Protecting individuals’ information is a key priority for the organization. As soon as the incident was discovered, the company took immediate action to mitigate and remediate the incident and to help prevent further unauthorized activity. The company is unaware of any misuse of individuals’ information due to this incident to date.”

The breach at Three Rivers Hospital is one of hundreds of medical data breaches reported in 2024. According to the Department of Health and Human Services, more than 700 such incidents have occurred nationwide, affecting over 180 million people. Experts warn that hospitals and healthcare facilities remain frequent targets for cybercriminals due to the sensitive nature of the information they store.