Emergency Responders Health Center Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Emergency Responders Health Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Emergency Responders Health Center
Emergency Responders Health Center, also known as ERHC, is a medical provider that focuses on the unique healthcare needs of first responders. Founded in 2004, ERHC operates out of Boise, Idaho, and serves over 8,000 first responders and their families, including firefighters, police officers, EMS and EMT personnel.
The organization offers outpatient services tailored to the risks faced by emergency personnel, including annual wellness exams, occupational medicine, urgent care, physical therapy, on-site lab and X-ray diagnostics, as well as mental health and wellness programs. ERHC operates multiple clinics, including a second location in Northeastern Washington and Northern Idaho.
What happened?
On April 11, 2025, Emergency Responders Health Center detected unusual activity on one of its email accounts. An investigation revealed that several ERHC internal email accounts may have been compromised by a cybercriminal between Dec. 11, 2024, and April 11, 2025.
The data breach may have compromised personal and protected health information belonging to current and former patients. ERHC published an initial notice of data security incident on its website on July 25, 2025 and began notifying affected individuals by mail on Sept. 26, 2025.
Possible Exposed Information
- Name
- Address
- Date of birth
- Social Security number
- Driver's license copy
- Health insurance information
- Medical records
- Payment information
The healthcare organization also reported the breach to the Montana Attorney General’s and office and the Washington Attorney General on Sept. 26, 2025.
Your Rights and Next Steps
If you received a notification letter from Emergency Responders Health Center or believe you may have been affected, it is important to know your rights and options. You may be entitled to seek compensation for any harm or inconvenience caused by this cybersecurity incident.
- Credit monitoring services: Enroll in the 12 free months of HaystackID credit monitoring and identity restoration services, offered by the medical group.
- Monitor your accounts carefully: Check your financial statements regularly for suspicious activity or unauthorized transactions. If you notice anything unusual, contact your financial institution immediately.
- Fraud alert and credit reports: A fraud alert informs creditors to take extra steps to verify your identity before opening new accounts in your name. Consumers are also entitled to one free credit report annually from each credit bureau. You can request a fraud alert or a credit report by contacting any one of the three major credit bureaus.
- Seek legal help: Lawyers are ready to help you understand your rights and pursue compensation.
You May Be Entitled to Compensation
If your information was exposed in the Emergency Responders Health Center data breach, you may be entitled to compensation for any harm or inconvenience suffered. Lawyers are investigating potential claims on behalf of those affected.
To find out if you qualify and to join a potential lawsuit, complete the form below.