Primary Health Services Center (PHSC), a health center based in Monroe, Louisiana, experienced a data breach affecting patient personally identifiable information (PII) and protected health information (PHI). Ransomware group INC RANSOM posted on the dark web that they gained unauthorized access to PHSC systems and obtained a large amount of sensitive data.
The cyberattack may have exposed a range of patient information, including names, Social Security numbers, driver's license or state ID numbers, medical records, health insurance details and payment information. Primary Health Services Center began notifying affected individuals by mail on July 10, 2025.
PHSC also published a data security incident notice on its own website. The total number of patients affected by the data breach has not been released, but may be in the thousands.
In addition to notifying affected individuals, PHSC is required by law to make the necessary federal and state disclosures.
If you believe your personal and protected health information may have been compromised in this breach:
Primary Health Services Center is a private, nonprofit clinic founded in Monroe, Louisiana, in 1997. As a federally qualified health center, PHSC provides community-based holistic healthcare and supportive services such as health education, case management, translation and transportation to increase access to care. The organization serves patients across Ouachita, Morehouse and Lincoln parishes and is recognized by the National Committee for Quality Assurance as a patient-centered medical home. More information about PHSC and its services can be found on the Primary Health Services Center website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.