Right at Home confirms data breach following ransomware attack

Published
October 26, 2025
Updated
October 26, 2025
Right at Home confirms data breach following ransomware attack
Right at Home
Types of INFORMATION affected
  • Names
    Names
  • Social security numbers
    Social Security Numbers
  • Dates of birth
    Dates of Birth
  • Addresses
    Addresses
  • Government IDs
    Government IDs
  • Medical Information
    Medical Info
  • Financial Info
    Financial Info

Affected by the

Right at Home

data breach?

Join the Lawsuit

It's free to join. 

On Oct. 6, 2025, Ever Care Corporation, which does business as Right at Home, experienced a data breach. The incident was first detected on Sept. 3, 2025, when the company noticed unusual activity within its systems. An internal investigation revealed that certain files were likely accessed and acquired without authorization.

The breach was determined to be the result of a ransomware attack claimed by the Sinobi group, who posted about the incident on a dark web forum on Oct. 8, 2025. The threat actor asserted they had stolen 50 GB of data, including customer information and contracts.

The company conducted a thorough review of the compromised files to identify whether personal information was involved. While the exact types of exposed consumer data have not been fully detailed as of publishing, the notice to affected individuals indicated that personal information, which may include personally identifiable information (PII) and possibly protected health information (PHI), was potentially involved.

The breach was first disclosed to the Maine Attorney General on Oct. 24, 2025.

Right at Home's response

As part of their response, the company is offering affected individuals access to twelve months of complimentary single bureau credit monitoring, credit report, and credit score services through Cyberscout, a TransUnion company. These services provide alerts for changes to credit files and proactive fraud assistance. Affected individuals are encouraged to enroll within ninety days of receiving their notification letter.

Given the ransomware nature of the attack and the potential for sensitive information to be misused, those affected should remain vigilant. Recommended steps include monitoring credit reports, placing a security freeze or fraud alert on credit files, and watching for suspicious activity on financial accounts. The company also provided detailed instructions and resources for protecting personal information, including how to obtain free credit reports and contact information for credit bureaus and relevant state agencies.

Individuals with questions or concerns can call the dedicated assistance line at 800-405-6108, Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding major U.S. holidays.

Notice Letter

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF

CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image
CTA Image