Western Montana Clinic Data Breach Affects Thousands of Patients

Western Montana Clinic PC experienced a data breach. on April 15, 2025, the practice discovered suspicious activity in certain employee email accounts, compromising both personally identifiable information (PII) and protected health information (PHI).

An investigation revealed an unauthorized actor accessed employee emails between March 11, 2025 and April 15, 2025. The cybercriminal attempted to change bank account information and redirect Western Montana Clinic funds.

An in-depth review took place and on June 3, 2025 it was determined the accessed emails and attachments contained patient information. Exposed information included names, contact information, dates of birth, Social Security numbers, treating physician, internal identification numbers, dates of service, medication information and treatment and diagnostic information.

The data breach was disclosed to the United States Department of Health and Human Services on Aug. 1, 2025. Western Montana Clinic began notifying affected patients on Aug. 1, 2025 and published a Notice of Data Privacy Incident on its own website.

Western Montana Clinic PC's response

In addition to required state and federal disclosures, Western Montana Clinic established an incident response line at 877-250-2787, 9:00 AM to 9:00 PM Eastern Time.

If you believe your personal and protected health information may have been compromised in this breach:

• Carefully review any notice or communication you receive from Western Montana Clinic.
• Monitor financial accounts and credit reports for signs of identity theft.
• Consider placing fraud alerts or credit freezes with the major credit bureaus.
• Be cautious of unsolicited emails or phone calls requesting personal information.

For more information about the healthcare organization, visit the Western Montana Clinic website.