Sturgis Hospital Data Breach Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Sturgis Hospital data breach that has affected at least 77,771 people.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Sturgis Hospital
Sturgis Hospital is a nonprofit healthcare provider based in Sturgis, Michigan, serving the local community since 1925. The hospital is recognized as Michigan’s first Rural Emergency Hospital, a designation it received in 2023, which allows it to focus on emergency services and rapid patient transfers for rural residents.
The hospital employs over 300 people and generates more than $40 million in annual revenue.
What Happened?
In December 2024, Sturgis Hospital detected unauthorized activity within a portion of its computer network. The hospital immediately began working with third-party cybersecurity experts to investigate and address the situation. While this investigation was ongoing, additional unauthorized activity was discovered in June 2025, leading to a second investigation.
Based on these investigations, Sturgis Hospital determined that an unauthorized third party may have accessed or acquired files containing sensitive information between Dec. 11 and Dec. 17, 2025. The breach was reported to the Montana Attorney General’s office and the Dept. of Health and Human Services on Sept. 18, 2025.
According to the HHS disclosure, 77,771 people have been affected.
Information Exposed:
- Names
- Contact information
- Government identification numbers
- Social Security numbers
- Financial account details (such as a bank account number)
- Health insurance details
- Clinical information (including prescriptions, treatment records, and similar medical details)
The hospital has notified affected individuals and is offering complimentary identity theft protection services.
Your Rights and Next Steps
If you received a notice from Sturgis Hospital or suspect your information was involved, there are important steps you can take to protect yourself and your family.
First, stay vigilant by monitoring account statements and credit reports for any suspicious activity. You are entitled to a free credit report each year from the major credit bureaus. Consider placing a fraud alert or security freeze on your credit file, which can help prevent unauthorized accounts from being opened in your name.
Sturgis Hospital is offering free membership to Experian’s IdentityWorks for a set period. If you received an activation code, enroll by the deadline to take advantage of identity theft protection and credit monitoring.
If you notice any unauthorized activity, report it immediately to your financial institution, law enforcement, and the Federal Trade Commission. You may also want to file a police report and keep a copy for your records.
Remember, you have rights under the Fair Credit Reporting Act, including the right to dispute inaccurate information on your credit report and have errors corrected.
Lawyers are ready to help individuals affected by this breach understand their legal rights and options.
You May Be Entitled to Compensation
If your information was exposed in the Sturgis Hospital data breach, you may be entitled to compensation for any harm or inconvenience you have experienced. Lawyers are actively investigating potential claims on behalf of affected individuals.
To find out if you qualify and to join a lawsuit, complete the below form. This is a no-cost, no-obligation way to protect your rights and pursue possible compensation.