Strauss Borrelli PLLC, a leading data breach law firm, is investigating American Renal Management, which does business as Innovative Renal Care (“IRC”), regarding its recent data breach. The IRC data breach involved sensitive protected health information belonging to an undetermined number of individuals.
ABOUT AMERICAN RENAL MANAGEMENT D/B/A INNOVATIVE RENAL CARE:
IRC is a network of dialysis professionals devoted to helping people with kidney disease lead their best lives as they undergo treatment.4 Today, IRC is improving the lives of its patients and advancing efficient and effective performance by leveraging data, analytics, technology and infrastructure.4 Along with 7 health system partnerships and more than 400 affiliated nephrologists, IRC serves approximately 15,000 patients.5 Headquartered in Franklin, Tennessee, IRC includes more than 250 dialysis centers in 25 states and employs over 1,000 individuals.
WHAT HAPPENED?
Recently, IRC reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed or acquired. According to the breach notice, on February 29, 2024, IRC became aware of suspicious activity within certain computer systems. 1 As a result, IRC launched an investigation to determine the nature of the incident.
Through its investigation, IRC confirmed that sensitive personal information in its systems may have been viewed and obtained by an unauthorized third party between February 21, 2024, and March 1, 2024. As a result, IRC began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Address
- Date of birth
- Driver’s license or state identification number
- Financial account information
- Taxpayer identification number
- Electronic signature
- Medical information (e.g., medical billing/claim information, medical diagnosis or condition information, medical prescription information, medical record number, medical treatment information, patient account number, patient identification number)
- Health insurance information
On February 14, 2025, IRC began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, IRC is providing affected individuals with a list of the specific types of sensitive information impacted and 12 months of complimentary credit monitoring services. A link to the form breach notification letters that IRC filed with the Attorney General of Maine is below.
If you received a breach notification letter from American Renal Management d/b/a Innovative Renal Care:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
