CPS Solutions Data Breach Exposes Protected Health Information

On February 10, 2025, CPS Solutions, LLC disclosed a data breach. According to the company's official disclosures on its website and to the U.S. Department of Health and Human Services, the breach involved unauthorized access to sensitive personal and medical information.

The breach exposed both personally identifiable information (PII) and protected health information (PHI). The compromised data included full names, dates of birth, addresses, Social Security numbers, health insurance details (such as member/group ID numbers or Medicaid/Medicare numbers), and medical information. The medical information exposed encompassed medical record numbers, patient account numbers, clinical information, provider details, diagnosis or treatment information, and prescription details such as medication names.

Currently, CPS Solutions has not publicly disclosed specific details about how the breach occurred or who was responsible. However, given the sensitive nature and scope of the exposed information, individuals affected by this breach may face increased risks of identity theft, medical fraud, or other forms of misuse of their personal and medical information.

CPS Solutions' response

In response to the incident, CPS Solutions promptly reported the breach to the U.S. Department of Health and Human Services, as required by federal regulations. The company has also established a dedicated webpage providing detailed information about the breach, available at CPS Solutions Data Breach Response.

To assist those impacted, CPS Solutions has partnered with IDX, a company specializing in identity protection and data breach response. Affected individuals are encouraged to visit the dedicated webpage to learn more about protective measures and resources available to them. It is strongly recommended that those affected closely monitor their credit reports, financial statements, and healthcare records for any unusual or suspicious activities.

Additionally, individuals concerned about their personal information can visit the U.S. Department of Health and Human Services breach report portal for further details on this incident and guidance on protecting their information.

Which Hospitals are Impacted?

• Beacon Health System (Three Rivers Hospital)
• Munson Healthcare
• Summit Healthcare

For more information, visit the company's official website at CPS Solutions.