Every public data breach

44 disclosed this week · 26,355 on record

Aspire Rural Health System

Disclosed Aug 20, 2025138,386 affectedConfirmed

Official notice

The covered entity (CE), Aspire Rural Health System, reported that it was the subject of a data breach that affected the protected health information (PHI) of 138,386 individuals. The PHI involved included clinical and demographic information. The CE notified HHS, affected individuals, the media, and posted substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals and implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.

What is known

People affected138,386 (as reported by the organization)
DisclosedAug 20, 2025
HappenedNov 4, 2024
AttackInsider
Data exposedNamesHealth
SectorHealthcare · US
StatusConfirmed

Sources

Notices filed

History of this record
attack2026-09-25
unknown to insiderby backfillSource
data_types2026-09-25
[] to ["names","health"]by backfillSource
summary2026-09-25
empty to The covered entity (CE), Aspire Rural Health System, reported that it was the subject of a data breach that affected the protected health information (PHI) of 138,386 individuals. The PHI involved included clinical and demographic informatiby backfillSource
records_basis2026-09-25
empty to organizationby backfillSource
records2026-09-25
empty to 138386by backfillSource
occurred2026-09-25
empty to 2024-11-04by backfillSource
Added2026-09-25
First recordedby backfillSource

First seen 2026-09-25 (Vermont AG), confirmed by Vermont AG. Record counts are as reported. Not legal advice.

Everything about Aspire Rural Health System