Hillcrest Convalescent Center; Hillcrest Raleigh at Crabtree Valley data breach

Clerk's notes

On March 3, 2025, Hillcrest Convalescent Center and Hillcrest Raleigh at Crabtree Valley formally notified the Maryland Attorney General's office about a data breach. The nature of the security incident was not specified in detail, but it impacted sensitive data maintained by these long-term care and senior rehabilitation facilities.

The compromised information includes several critical categories: Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Home Address, and Phone Number. The exposure of this combination of data poses substantial risks, such as medical identity theft, fraudulent use of personal identifiers, and other financial harms.

As healthcare providers, Hillcrest Convalescent Center and Hillcrest Raleigh at Crabtree Valley are legally obligated under regulations like HIPAA, HITECH, and Maryland consumer protection statutes to safeguard patient and resident data. A breach involving such sensitive information suggests that required security protocols may not have been sufficiently maintained, potentially leaving systems vulnerable to unauthorized access.

If you have received an official data breach notification letter from Hillcrest Convalescent Center or Hillcrest Raleigh at Crabtree Valley, it indicates that your confidential information was involved in this security incident. Such a notice establishes your standing to seek accountability. Under current data privacy litigation, individuals may pursue claims based on the increased risk of identity theft and loss of privacy, even if immediate financial losses have not yet occurred.

Understanding the implications of this data exposure is an important step for those affected. We offer a free case review to help individuals assess their specific situation and explore any potential legal options they may have concerning this incident. This review carries no obligation.

If a notification letter about this breach reached you, see every Maryland data breach on file or browse all cases.