Union Health System Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Union Health System, Inc. data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Union Health System, Inc.
Union Health System, Inc. is a non-profit hospital based in Indiana. It serves as the parent company for Union Hospital, Inc., which operates a major acute-care hospital in Terre Haute, Indiana. Union Health System also partners with Union Associated Physicians Clinic, a large multi-specialty clinic.
Union Health System oversees a network of healthcare facilities and clinics that offer a broad range of services, including medical-surgical care, obstetrics, pediatrics, and specialized programs such as cardiovascular and orthopedic care.
What Happened?
On April 21, 2025, Union Health System, Inc. announced a data breach that affected 262,831 individuals in the United States. The breach was first discovered when an unknown party contacted Union Health, claiming to have patient information. Union Health confirmed the claim on February 24, 2025, and traced the incident to Oracle Health/Cerner, a third-party vendor providing data migration services.
Oracle Health/Cerner reported that unauthorized access to its data migration environment occurred after January 22, 2025. The breach was discovered by Oracle Health/Cerner on February 20, 2025, and Union Health received confirmation of the affected individuals on March 22, 2025. Importantly, the breach did not involve Union Health’s own systems or live electronic health records, but rather information hosted by Oracle Health/Cerner.
What types of information were exposed?
- Names
- Social Security numbers
- Driver’s license numbers
- Dates of birth
- Treating physicians
- Dates of service
- Medication information
- Insurance information
- Treatment and/or diagnostic information
Your Rights and Next Steps
If you received a notification about this breach, you have important rights and options. First, review any letters or emails from Union Health regarding the incident. Even if you have not yet received a letter, if you were a patient of Union Health or its affiliates, your information may have been involved.
You should take the following steps:
- Monitor your credit reports and healthcare statements for any suspicious activity.
- Take advantage of the complimentary identity monitoring services offered by Union Health.
- Report any unauthorized charges or suspicious activity to your healthcare provider or insurer immediately.
In addition to these steps, you have the right to seek compensation if your information was compromised. Data breach laws are designed to protect consumers like you, and lawyers are ready to help you understand your options and pursue a claim.
You May Be Entitled to Compensation
If your personal information was exposed in the Union Health System, Inc. data breach, you may be eligible for compensation. Lawyers are ready to help you determine your eligibility and guide you through the process of joining a class action lawsuit. Completing the below form is the first step to protecting your rights and seeking compensation for any harm caused by this breach.