Frederick Health Medical Group Security Incident

Sensitive personal and health information exposed in ransomware attack. Victims may be eligible for compensation. A class action lawsuit was recently filed against Frederick Health Medical Group , a major healthcare provider in Maryland, alleging negligence in its failure to properly protect patient information and comply with federal and industry cybersecurity standards. What Happened? According to information reported to the U.S. Department of Health and Human Services (HHS) , Frederick Health experienced a ransomware attack on January 27, 2025 . Upon discovering the incident, the healthcare provider engaged a third-party forensic firm and notified law enforcement. The investigation revealed that an unauthorized party accessed Frederick Healths IT systems and copied certain files from a file server on the same day. The stolen files contained sensitive personal and health information of nearly one million patients. Frederick Health began mailing breach notification letters to affected individuals on March 28, 2025. Although the healthcare provider has described the incident as a ransomware event, no ransomware group has publicly claimed responsibility, leading to speculation that a ransom may have been paid. What Information Was Stolen During the Breach? According to breach notifications and disclosures, the stolen information may include: Names Dates of birth Addresses Social Security Numbers Medical record numbers Health insurance information Clinical information related to patient care The breach impacted approximately 934,326 individuals , making it one of the largest healthcare data breaches reported in 2025. What is Frederick Health Doing to Protect My Identity? Frederick Health has stated that it has taken steps to secure its IT systems following the attack and has mailed notification letters to individuals whose information was compromised. However, specific details regarding any additional cybersecurity enhancements have not been revealed. Frederick...

... (truncated for display)