On or around May 19, 2025, Friesen Group, an organization that provides business support services to a group of medical companies, discovered a data breach. An investigation revealed that a cybercriminal gained access to the Friesen Group network and compromised personal and protected data of an unknown number of individuals.
The cybersecurity incident was reported to the U.S. Department of Health and Human Services on Aug. 8, 2025. Exposed information may include names, addresses, dates of birth, Social Security numbers, driver's license or state ID numbers, health insurance information, medical records and financial information.
While it has not been released, the data breach is believed to have impacted one or more of the Friesen Group family companies: Owens, Wellscript, J3, and Lifemed.
Friesen Group initiated an investigation and is working to identify and notify impacted individuals. The company published a Notice of Data Security Incident on it's website and will be offering affected people credit monitoring and identity protection services.
If you believe your personal and protected health information may have been compromised in this breach:
For more details the group and its family of companies, visit Friesen Group’s official website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.