Atrium Centers Data Breach Exposed Sensitive Patient and Employee Information

Atrium Centers Inc., an employee-owned skilled nursing care provider headquartered in Columbus, Ohio, disclosed a data breach stemming from unauthorized access to its computer network in October 2025.

The total number of individuals affected in the United States has not been publicly disclosed. The breach potentially affected current and former Atrium patients, related responsible parties and employees.

On or about Oct. 13, 2025, Atrium Centers identified unusual activity affecting certain IT systems within its network, which prompted the company to take steps to secure its systems and launch an investigation.

The investigation found that unauthorized actors had gained access to the company's network between Oct. 8, 2025, and Oct. 12, 2025. During the window, certain files and folders within the network were viewed and/or copied without authorization.

On Nov. 9, 2025, a ransomware group known as Medusa claimed responsibility for the attack. The claim was made on a dark web forum hosted on the Tor network.

The types of information potentially exposed in the breach included names, contact and demographic information, government identification numbers such as Social Security numbers and driver's license numbers, patient identification numbers, medical record numbers, medical information, health insurance information, claim information, financial account information and dates of birth.

The breach was reported to the Vermont Attorney General on Aug. 14, 2026. The company posted a notice on its website with details about the incident and resources for potentially affected individuals.

Atrium Centers' response to the breach

Atrium Centers encouraged potentially impacted individuals to remain vigilant by reviewing their financial statements and monitoring for suspicious activity on their own.

Atrium Centers set up a dedicated toll-free assistance line at 855-433-1829 for people with questions about the incident. The line is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding U.S. holidays.

Individuals may also contact Atrium Centers in writing at 2550 Corporate Exchange Drive, Suite 200, Columbus, OH 43231.