Covenant Health, Inc. data breach
Covenant Health, an integrated healthcare provider in Montana, reported a data breach on January 2, 2026, revealing a compromise of its network infrastructure. This incident may have exposed sensitive patient information, including medical and personal details, for those who received notification.
Docket sheet
- Company
- Covenant Health, Inc.
- Venue
- Montana Attorney General
- Filed
- January 2, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredMay 18, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Montana Attorney GeneralJanuary 2, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Date of Birth
- Social Security Number
- Medical Record Number
- Health Insurance ID Number
- Diagnosis and Treatment Information
- Prescription Information
- Provider and Treatment Dates
Clerk's notes
Covenant Health, Inc., a healthcare provider operating in Montana, formally reported a security incident to regulators on January 2, 2026. This breach, which occurred on May 18, 2025, involved a compromise of the company's network infrastructure and is currently under monitoring.
The breach may have exposed a range of highly personal and protected health information. The specific categories of data identified as potentially compromised include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, and Provider and Treatment Dates.
Exposure of such data carries significant risks for affected individuals. A compromised Social Security Number, alongside your Full Name and Date of Birth, can lead to identity theft and sophisticated fraud. Furthermore, the exposure of Medical Record Numbers and detailed health information like Diagnosis and Treatment Information and Prescription Information can result in medical identity theft, unauthorized billing, or misuse of private health conditions.
As a healthcare entity, Covenant Health, Inc. has a legal obligation under federal and state laws, including HIPAA and HITECH, to protect patient data through robust security measures. The occurrence of a data breach of this nature suggests that these safeguards may have been insufficient to prevent unauthorized access to sensitive records.
If you received a data breach notification letter from Covenant Health, Inc., it confirms that your personal and medical information was involved in this security incident. Receiving this notification establishes your legal standing to seek further information regarding your rights. We are actively investigating claims related to this breach.
There is no out-of-pocket cost to you; our firm operates on a contingency fee basis. This means we are compensated only if a recovery is secured on your behalf. Contact us to learn more.
If a notification letter about this breach reached you, see every Montana data breach on file or browse all cases.
Other Montana docket entries
- MemberSource Credit UnionMontana AGMay 5, 2026Monitoring
- MemberSource Credit UnionMontana AGMay 5, 2026Investigation Open
- MemberSource Credit UnionMT AGMay 5, 2026Investigation Open
- GrayRobinson P.A.Montana AGApril 24, 2026Investigation Open
- GrayRobinson P.A.Montana AGApril 24, 2026Monitoring
- GrayRobinson P.A.MT AGApril 24, 2026Investigation Open
- First Advantage CorporationMontana AGApril 21, 2026Monitoring
- First Advantage CorporationMT AGApril 21, 2026Investigation Open
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.