Myrtue Medical Center Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Myrtue Medical Center data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Myrtue Medical Center
Myrtue Medical Center is based in Harlan, Iowa, serving Shelby County and surrounding communities since 1954. The organization operates a main hospital as well as five rural health clinics in Harlan, Avoca, Shelby, Earling, and Elk Horn.
Over the years, Myrtue Medical Center has expanded its offerings to include surgery, specialty clinics, diagnostic imaging, physical and occupational therapy, behavioral health, and various community health services. The medical center employs more than 40 physicians across a wide range of specialties, including family medicine, OB/GYN, general surgery, and behavioral health.
What Happened?
On June 13, 2025, Myrtue Medical Center detected suspicious activity within its computer systems. In response, the organization quickly strengthened its system security and engaged a third-party cybersecurity firm to investigate the incident. While the forensic investigation is ongoing, Myrtue Medical Center has confirmed that unauthorized access to certain individuals’ personal information may have occurred.
Shortly after the breach, a group known as Worldleaks claimed responsibility for the attack, alleging that they accessed 1.2 terabytes of data, including over 800,000 files. The incident was also posted on the dark web on June 24, 2025.
At the time of publishing, Myrtue Medical Center is working to identify exactly which individuals were impacted and what specific information was exposed. Written notification will be sent to affected individuals by mail.
Your Rights and Next Steps
If you are concerned that your information may have been exposed in this incident, there are important steps you can take to protect yourself:
- Monitor your financial statements and credit reports for any unauthorized activity.
- Place a fraud alert or credit freeze on your credit reports by contacting the three major credit bureaus: Equifax, Experian, and TransUnion.
- Report any suspicious activity to the Federal Trade Commission (FTC).
- You also have the right to file a police report if you believe you are a victim of identity theft.
Myrtue Medical Center has established a toll-free hotline at 866-905-8124 for questions about the breach. Lawyers are ready to help you understand your rights and the steps you can take if your information was compromised.
You May Be Entitled to Compensation
If your personal information was exposed in the Myrtue Medical Center data breach, you may be eligible for compensation. Laws protect your privacy and hold organizations accountable when they fail to safeguard your data. Lawyers are ready to help you take action and pursue the compensation you deserve.
To find out if you qualify and to join the lawsuit, complete the below form.