St. John’s Riverside Hospital Data Breach

St. John’s Riverside Hospital recently informed individuals of a data breach that resulted from unauthorized access to a limited number of employee email accounts. While the breach appears to be related to a phishing attempt, no personal information has been misused for identity theft or fraud. However, affected individuals should be aware of their rights and consider exploring legal options for compensation.

St. John’s Riverside Hospital’s Data Breach Investigation

In September 2025, St. John’s Riverside Hospital became aware of unauthorized access to a limited number of employee email accounts. The attacker’s goal was to distribute phishing emails and reroute payment funds. Upon discovery of the incident, the hospital immediately took steps to protect its systems. These steps included changing passwords, revoking session tokens, resetting multifactor authentication, and engaging data security and privacy experts to investigate the breach.

Although the hospital quickly contained the unauthorized access, the breach still exposed sensitive information stored within the affected email accounts. While there is no evidence that personal information has been misused for identity theft or fraud, the incident raises concerns about potential future risks for affected individuals.

When Did This Breach Occur?

The breach was first detected in September 2025 when St. John’s Riverside Hospital identified suspicious activity within a limited number of employee email accounts. The breach involved unauthorized access for the purpose of distributing phishing emails and rerouting payment funds. The hospital promptly took action to address the situation once it was discovered.

What Information Was Breached?

The following types of personal information may have been impacted during the breach:

• Name

• Date of Birth

• Social Security Number

• Driver’s License or State Identification Number

• Financial Account Number

• Health Insurance Information

• Medical Condition Information

• Treatment Provider Name

• Medical Record Number

• Treatment Cost Information

• Diagnosis and/or Treatment Information

It is important to note that not all of the listed categories of information are relevant to each individual whose information may have been affected. The hospital is continuing its investigation and will provide updates if additional information is identified as compromised.

What You Can Do

If you were affected by this breach, it’s essential to take steps to protect your personal information. Here are some actions you can take:

1. Monitor Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit bureaus. Review your credit reports regularly for any suspicious activity or errors.

2. Review Your Account Statements: Regularly check your bank and credit card statements for unauthorized transactions. If you spot any unusual activity, report it to the relevant financial institutions immediately.

3. Report Suspicious Activity: If you identify any fraudulent or suspicious activity, contact your financial institutions and law enforcement right away to mitigate potential damage.

4. Enroll in Credit Monitoring Services: If offered, consider enrolling in credit monitoring services to stay informed of any changes to your credit file that may indicate fraud or misuse of your information.

5. Stay Alert for Phishing Scams: Be cautious of any emails, calls, or messages attempting to exploit the data exposed during the breach. Do not share personal information unless you are certain of the request’s legitimacy.

Remaining vigilant and proactive can help prevent further misuse of your personal information.

File a Data Breach Lawsuit Against St. John’s Riverside Hospital

If you were impacted by this breach and your personal information was exposed, you may be entitled to compensation for any harm caused. Data breaches like this can lead to identity theft, financial loss, and emotional distress, and victims may have the right to seek restitution.

If you were affected by this breach, Class Action U can connect you with an attorney who specializes in class action lawsuits related to data breaches. By filing a class action lawsuit, you can seek compensation for the damages caused by St. John’s Riverside Hospital’s failure to secure personal information properly.

Contact us at Class Action U for a free consultation to determine if you have a case. Fill out our quick, easy, and secure form to get started, and our legal partners will guide you through the process. There is no cost to reach out, and there’s no obligation after speaking with one of our specialists.