Lake Regional Health System Data Breach

Lake Regional Health System reported a data breach involving Cerner Corporation’s legacy systems between February and October 2025, which exposed personal health information such as Social Security numbers and medical details. Affected individuals are being offered free credit monitoring services. If you were impacted, you may be eligible to file a class action lawsuit for compensation. Contact Class Action U for a free consultation to explore your legal options.

Lake Regional Health System
Date of Breach: October 2025
CAU logo

Who was affected:

Clients of Lake Regional Health System

Impacted Data:

Names

Dates of Birth

Medical Record Numbers

Social Security Numbers

Other Personal Health Information

Lake Regional Health System (LRHS) has recently notified its patients about a data breach involving Cerner Corporation, a third-party electronic health record vendor. While LRHS’s own systems were not compromised, sensitive patient information may have been exposed through Cerner’s legacy systems. Affected individuals should understand their rights and take necessary precautions to protect their personal information, as well as explore legal options for compensation.

Lake Regional Health System Data Breach Investigation

In late October 2025, LRHS learned from Cerner Corporation about a data security incident that may have involved certain patient information stored within Cerner’s systems. The breach occurred in February 2025, when Cerner identified unauthorized access to protected health information in their legacy systems. LRHS immediately began working with Cerner and external cybersecurity specialists to determine the scope of the breach, although no disruption to clinical operations at LRHS was reported.

Cerner’s investigation, which involved law enforcement oversight, confirmed that only legacy Cerner systems were affected. Law enforcement directed Cerner to delay notification until the investigation could proceed without interference. Now that law enforcement has allowed notifications to be sent, LRHS is notifying potentially impacted individuals about the breach.

When Did This Breach Occur?

Cerner became aware of the breach in February 2025 but was instructed to delay notifications until the investigation was complete. LRHS was notified of the incident in October 2025, and notifications to affected individuals are now being issued.

What Information Was Breached?

While no financial account information has been reported as compromised, the breach potentially exposed the following types of personal health information:

  • Names

  • Dates of Birth

  • Medical Record Numbers

  • Social Security Numbers

  • Other Personal Health Information used to provide care

The compromised data is limited to legacy Cerner systems and does not involve any data from LRHS’s own IT systems.

What You Can Do

If you were potentially impacted by this breach, here are some steps you can take to protect your personal information:

  1. Enroll in Free Credit Monitoring Services: LRHS is offering free 3-bureau credit monitoring for two years to affected individuals through Experian. This service will allow you to monitor your credit reports for any unauthorized activity or errors.

  2. Monitor Your Credit Reports: Regularly review your credit reports for any signs of suspicious activity. You are entitled to one free credit report annually from each of the three major credit bureaus.

  3. Use Identity Protection Services: In addition to credit monitoring, LRHS is offering internet surveillance services to help detect any misuse of your personal information online.

  4. Place a Fraud Alert or Credit Freeze: Consider placing a fraud alert or security freeze on your credit files with the three major credit bureaus. This will make it harder for anyone to open new accounts in your name without your consent.

  5. Report Suspicious Activity: If you notice any fraudulent activity or unauthorized accounts, report it immediately to your financial institution, healthcare provider, or insurance company.

By remaining vigilant and monitoring your personal information, you can reduce the risk of identity theft and fraud.

File a Data Breach Lawsuit Against Lake Regional Health System

If your personal information was exposed in this breach and you have experienced any harm as a result, such as identity theft or financial loss, you may be entitled to compensation. Data breaches can lead to significant emotional distress and financial damages, and victims have the right to seek restitution.

If you were affected by this breach, Class Action U can connect you with an attorney who specializes in class action lawsuits related to data breaches. By joining a class action lawsuit, you can seek compensation for the damages caused by Cerner’s failure to secure patient data and Lake Regional Health System’s involvement as the affected healthcare provider.

Contact us at Class Action U for a free consultation to determine if you have a case. Fill out our quick, easy, and secure form to get started, and our legal partners will guide you through the process. There is no cost to reach out, and there’s no obligation after speaking with one of our specialists.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: December 4, 2025
Date of Breach: December 19, 2025
Date of Breach: October 6, 2025, to December 19, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.