Healthcare Services Group data breach impacts 624,000 people

The Healthcare Services Group Inc. (HSGI) data breach impacted 624,000 people, with the organisation confirming that unauthorized access to its network was detected on 7 October 2024 and that the intrusion began on 27 September 2024. The investigation found that intruders exfiltrated data from the systems they accessed, and that an unauthorized actor may have accessed and copied certain files between 27 September and 3 October 2024.

A notification accompanying the disclosure notes that the review of the involved files took roughly ten months, and affected individuals were only alerted on 25 August 2025. Data exposed varied by individual and may include full name, Social Security number, driver’s license number, state identification number, financial account information, and account access credentials; the company says there is no evidence of misuse at present.

HSGI offers 12 and 24-month credit monitoring and identity theft protection where appropriate, and urged vigilance against phishing and suspicious activity on banking accounts. No ransomware groups have claimed the attack to date, according to the article.