Madison Healthcare Services Data Breach

Madison Healthcare Services, a healthcare provider based in Minnesota, has reported a significant data breach involving unauthorized access to patient data. The breach, attributed to the threat actor WorldLeaks, was discovered on September 25, 2025, and was publicly disclosed to the U.S. Department of Health and Human Services (HHS) on December 2, 2025. The breach potentially exposed sensitive personal and medical information of patients.

Madison Healthcare Services’ Data Breach Investigation

On September 25, 2025, Madison Healthcare Services identified suspicious network activity that prompted an internal investigation. The investigation confirmed that unauthorized access occurred between July 2025 and August 2025, during which the attacker, identified as the WorldLeaks group, accessed the network.

The threat actor, WorldLeaks, claimed responsibility for the breach and allegedly leaked the stolen data on the dark web. While the full scope of the breach is still under review, it is believed that sensitive personal information, including names, addresses, Social Security numbers, medical record numbers, health insurance details, and clinical records, may have been exposed.

As of the latest public disclosures, 500 individuals were initially estimated to have been affected by the breach. However, this number may increase once the full review of the affected files is completed.

When Did This Breach Occur?

The breach occurred between July 2025 and August 2025, and it was discovered on September 25, 2025. The breach was publicly disclosed to HHS on December 2, 2025.

What Information Was Breached?

The compromised information may include:

• Names
• Addresses
• Dates of birth
• Social Security numbers
• Medical record numbers
• Health insurance details
• Clinical records

This sensitive data has been leaked on the dark web, increasing the risk of identity theft and fraud for those affected.

What You Can Do

If you were affected by this breach, it is important to take the following steps to protect your personal and medical information:

1. Monitor your credit reports and financial accounts for any unusual activity. You are entitled to one free credit report per year from each of the three major credit bureaus, available at www.annualcreditreport.com.
2. Place a fraud alert or credit freeze on your credit files. A fraud alert will require businesses to verify your identity before extending credit, while a credit freeze restricts access to your credit report entirely.
3. Sign up for identity theft protection services: If Madison Healthcare Services offers any free credit monitoring or identity protection services, make sure to enroll. These services can help track potential misuse of your data.
4. Report any suspicious activity: If you notice fraudulent activity or identity theft, immediately contact your financial institution and consider reporting the incident to the Federal Trade Commission (FTC) and your state Attorney General.

File a Data Breach Lawsuit Against Madison Healthcare Services

If you were notified about this breach and your personal information was exposed, you may be entitled to file a lawsuit and seek compensation for the potential misuse of your sensitive data. Madison Healthcare Services is offering monitoring services, but many individuals may still be eligible for compensation through a class action lawsuit.

Class Action U is here to connect individuals impacted by data breaches with qualified attorneys who specialize in class action lawsuits. If you’ve been affected by this breach, contact us for a free consultation to explore your legal options. Simply fill out our quick, easy, and secure form to get in touch with a qualified attorney today. There is no cost to reach out, and you are under no obligation to take further action after speaking with someone from our team.