Aspire Rural Health System
Disclosed Aug 20, 20251 year ago138,386 affectedConfirmed
The covered entity (CE), Aspire Rural Health System, reported that it was the subject of a data breach that affected the protected health information (PHI) of 138,386 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 138,386 (as reported by the organization) |
|---|---|
| Disclosed | Aug 20, 2025 |
| Happened | Nov 4, 2024 |
| Attack | Insider |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Vermont Attorney General: 2025-08-20 Aspire Rural Health System Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Aspire Rural Health Systemin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Aspire Rural Health System (Healthcare Provider, MI)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Vermont AGresidents of VT | Aug 20, 2025 | |
| Indiana AGresidents of IN | Aug 20, 2025 | 69 |
| HHS archivetotal | Aug 20, 2025 | 138,386 |
History of this record
- 2026-09-25 · attack: unknown to insider · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Aspire Rural Health System, reported that it was the subject of a data breach that affected the protected health information (PHI) of 138,386 individuals. The PHI involved included clinical and demographic informati · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 138386 · backfill source
- 2026-09-25 · occurred: empty to 2024-11-04 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.