Conifer Health Solutions Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Conifer Value-Based Care, LLC data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Conifer Value-Based Care
Conifer Value-Based Care is a business line within Conifer Health Solutions, a company based in Dallas, Texas, that provides administrative and business services to healthcare providers and health plans across the United States. Conifer Health Solutions was founded in 2008 and has thousands of employees, working primarily with hospitals, health systems, physician groups, employers and unions.
Conifer Health Solutions manages billions in net patient revenue annually and supports millions of patient interactions.
What Happened?
On Aug. 28, 2025, Conifer Value-Based Care, LLC discovered that an unauthorized third party had gained access to an employee’s Microsoft Office 365 business email account. The unauthorized access occurred on Aug. 28 and Aug. 29, 2025. This compromised email account was separate from Conifer’s internal network and systems, which were not affected.
After learning of the incident, Conifer took immediate steps to contain the threat and launched an investigation. The company completed a review to identify affected individuals and notified healthcare providers and health plans by Nov. 14, 2025. The process of verifying addresses for potentially affected individuals concluded on Dec. 5, 2025.
Information exposed:
- Name
- Date of birth
- Health insurance information (such as insurer name, subscriber name, group number, billing and claims information)
- Medical information (including medical record number, patient account number, provider name, date(s) of service, diagnosis and treatment information, and prescription information)
Your Rights and Next Steps
If you received a notice from Conifer Value-Based Care, or believe you may have been affected, you have important rights and options. Even if there is no evidence of misuse so far, taking action now can help protect your information and your financial well-being.
Here are some steps you can take:
- Review statements from healthcare providers and insurance companies for any unusual or unauthorized activity
- Report any questionable charges to the provider or company immediately
- Consider placing a fraud alert on your credit file with any of the major credit bureaus, which will notify creditors to take extra steps to verify your identity
- You have the right to request a security freeze from the credit bureaus, which restricts access to your credit report and can help prevent new accounts from being opened in your name without your consent
- Stay alert for any communications from Conifer or your healthcare provider regarding the breach
If you notice any signs of identity theft, report it to your local law enforcement, your state attorney general and the Federal Trade Commission.
Lawyers are ready to help individuals affected by this data breach understand their rights and pursue claims for compensation.
You May Be Entitled to Compensation
If your information was exposed in the Conifer Value-Based Care, LLC data breach, you may be eligible to join a lawsuit and seek compensation for any harm suffered. Lawyers are currently investigating claims on behalf of affected individuals.
To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.
.png)