Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

Clinical Registry Solutions Data Breach

Clinical Registry Solutions experienced a data breach on April 9, 2026, potentially exposing patient information, including names, medical record numbers, and procedure dates, of patients at St. Mary’s Medical Center. CRS secured its systems, investigated the incident, notified affected individuals, and provided guidance on protective measures. Individuals are advised to monitor accounts, remain vigilant, and explore legal options regarding potential misuse of personal information.

Clinical Registry Solutions
Date of Breach: April 9, 2026
CAU logo

Who was affected:

Clients of Clinical Registry Solutions

Impacted Data:

First and last names

Medical record numbers

Procedure dates

Clinical Registry Solutions (“CRS”), a vendor supporting Dignity Health – St. Mary’s Medical Center, disclosed a data breach after unauthorized access to its network on April 9, 2026. The breach potentially exposed protected health information (PHI) and personal information of certain patients.

Clinical Registry Solutions’ Data Breach Investigation

CRS discovered suspicious activity in its network on April 9, 2026, and immediately secured its systems. A forensic investigation determined that unauthorized access resulted in the acquisition of certain files containing patient information maintained by CRS on behalf of St. Mary’s Medical Center.

CRS reviewed the impacted data to determine the scope of the breach, identify affected individuals, and notify them promptly. The breach did not include Social Security numbers, diagnoses, or treatment plans. CRS has not received any reports of identity theft, fraud, or misuse of patient information related to this incident.

When Did This Breach Occur?

The unauthorized access occurred on April 9, 2026, and was discovered the same day. Notifications to affected individuals were issued promptly after the investigation.

What Information Was Breached?

The compromised information may have included:

  • First and last names
  • Medical record numbers
  • Procedure dates

No Social Security numbers, diagnoses, or treatment plans were exposed.

What You Can Do

Affected individuals should consider the following precautions:

  1. Review and monitor financial accounts and credit reports for suspicious activity.
  2. Be alert for phishing emails, scam calls, or other suspicious communications.
  3. Report any unusual activity to your financial institution or service provider immediately.
  4. Enroll in credit monitoring services if offered, such as those provided by CRS through TransUnion.

These steps help reduce the risk of identity theft or fraudulent use of personal information.

File a Data Breach Lawsuit Against Clinical Registry Solutions

Individuals notified about this breach may be eligible to pursue compensation through a data breach lawsuit.

Organizations handling sensitive patient and personal information are expected to implement reasonable cybersecurity safeguards. Unauthorized access to protected health information and personal data can put individuals at risk of fraud, identity theft, and privacy violations.

A data breach lawsuit may help affected individuals recover compensation for identity protection services, time spent monitoring accounts, and emotional distress. Legal action may also encourage organizations to improve cybersecurity measures and better protect sensitive patient information.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: April 28, 2026
Date of Breach: King Ocean Services Limited
Date of Breach: July 2, 2026

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.