PROVAIL Data Breach Investigation

Recently, PROVAIL discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed.¹ According to the breach notice, on or around June 8, 2025, PROVAIL became aware of suspicious activity in its network environment.¹ As a result, PROVAIL launched an investigation to determine the nature of the incident.

Through its investigation, PROVAIL determined that certain data on PROVAIL systems was accessed or acquired without authorization from June 7 to June 9, 2025.¹ As a result, PROVAIL began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Driver’s license number or state identification number
• Date of birth
• Address
• Financial account information (e.g., claims information, credit card number/bank account number)
• Health records (e.g., clinic information, diagnosis, condition information, lab results, and medications)
• Health insurance information

As a result, PROVAIL posted notice of the incident on its website. Based on the breach notice, PROVAIL is providing affected individuals with a list of the specific types of sensitive information impacted. A link to the form breach notification that PROVAIL posted to its website is below.