Heritage Holdings Data Breach Lawsuit

Heritage Holdings LP reported a data breach tied to a network intrusion that potentially exposed protected health and personal information. The breach impacted systems used by Heritage Communities, Orchard Pointe, and OnCare Health. While there’s no current evidence of misuse, the types of data accessed include Social Security numbers, medical records, and financial data. Affected individuals are urged to take action and may qualify for legal compensation.

Heritage Holdings
Date of Breach: September 16, 2025
CAU logo

Who was affected:

Clients of Heritage Holdings

Impacted Data:

First and last name

Social Security number

Driver’s license number

Bank account information

Credit card information

Date of birth

Address

Phone number

Email address

Medication information

Healthcare diagnosis information

Test results

Healthcare provider information

Heritage Holdings LP has disclosed a significant data breach stemming from a cyberattack on its network, putting sensitive health and personal information of patients and clients at risk.

Heritage Holdings LP’s Data Breach Investigation

On or around September 16, 2025, Heritage Holdings LP—a business associate of Heritage Communities, Orchard Pointe, and OnCare Health—identified a network intrusion that affected several internal systems. The organization immediately launched an investigation and engaged a third-party cybersecurity firm to determine the scope and potential impact.

After thorough analysis, Heritage confirmed that protected health information (PHI) and personal details may have been exposed. While there is currently no direct evidence that any of the compromised data has been misused, the forensic investigation could not rule out unauthorized access. As a result, Heritage is taking proactive steps to notify affected individuals and bolster its internal security protocols.

The types of information potentially accessed vary by individual but include highly sensitive data such as Social Security numbers, driver’s license details, banking and credit card information, and personal health data. Heritage is conducting a detailed data analysis and has pledged to notify all impacted parties as required by law.

Despite no confirmed cases of fraud so far, this breach places thousands of individuals at risk for identity theft, medical fraud, and financial harm. Heritage is advising all affected to monitor financial and medical statements for any signs of suspicious activity.

At Class Action U, we know that facing the consequences of corporate negligence can feel overwhelming. But you don’t have to navigate it alone. Legal action may be available for those affected by the Heritage Holdings breach. If your information was involved, you could be entitled to compensation.

When Did This Breach Occur?

The network intrusion was discovered on or around September 16, 2025. Heritage Holdings publicly disclosed the breach on October 28, 2025.

What Information Was Breached?

The types of information potentially accessed include:

  • First and last name

  • Social Security number

  • Driver’s license number

  • Bank account information

  • Credit card information

  • Date of birth

  • Address

  • Phone number

  • Email address

  • Medication information

  • Healthcare diagnosis information

  • Test results

  • Healthcare provider information

Note: Not all data types were exposed for every individual.

What You Can Do

If you received a notice from Heritage Holdings LP or its affiliates, it’s important to take these protective steps right away:

  • Review all medical and financial statements for suspicious charges or claims.

  • Contact credit bureaus (Equifax, TransUnion, Experian) to request a fraud alert or credit freeze.

  • Consider enrolling in identity theft protection services if offered.

  • File a report with the FTC at identitytheft.gov if you suspect your information has been misused.

  • Reach out to Class Action U to explore your legal options for pursuing compensation.

Data breaches can cause lasting harm. We’re here to help you take control and protect your future.

File a Data Breach Lawsuit Against Heritage Holdings LP

If Heritage Holdings LP has notified you that your personal or health information was part of this breach, you may be eligible to join a class action lawsuit. Victims of data breaches often face serious consequences, from identity theft to financial loss — and companies must be held accountable for failing to protect your information.

A class action lawsuit allows affected individuals to band together and seek justice as a group. You don’t have to face this situation alone — your voice matters, and your legal rights matter even more.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: August 9, 2025
Date of Breach: November 4, 2025
Date of Breach: November 4, 2024

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.