Strauss Borrelli PLLC, a leading data breach law firm, is investigating Methodist Le Bonheur Healthcare (“Methodist Le Bonheur”) regarding its recent data breach. The Methodist Le Bonheur data breach involved sensitive personal information and protected health information belonging to an undetermined number of individuals.
ABOUT METHODIST LE BONHEUR HEALTHCARE:
Methodist Le Bonheur is a healthcare and hospital network based in Tennessee. Founded in 1918, Methodist Le Bonheur provides a range of healthcare services to patients, including weight management, cardiology, neurology, oncology, primary care, emergency care, and more.2,3 Headquartered in Memphis, Tennessee, Methodist Le Bonheur employs over 10,000 individuals and offers care through over 95 hospitals and medical centers.3,4
WHAT HAPPENED?
Recently, Methodist Le Bonheur announced that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice shared on its website, in April 2025, Oracle Health (formerly Cerner Corporation), a third-party electronic health records vendor previously used by Methodist Le Bonheur, informed Methodist Le Bonheur that an unauthorized third party gained access to older Cerner systems as early as January 22, 2025, and obtained certain data.1 As a result, Oracle Health launched an investigation to determine the nature of the incident.
Through its investigation, Oracle Health confirmed to Methodist Le Bonheur that sensitive personal information in Oracle Health/Cerner systems related to Methodist Le Bonheur patients may have been accessed and acquired by an unauthorized third party during the breach. As a result, Methodist Le Bonheur began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- Information related to patient medical records (medical record number, doctors, diagnoses, medicines, test results, images, care, treatment)
As a result of the breach, Methodist Le Bonheur posted notice of the breach on its website. Additionally, Methodist Le Bonheur will begin mailing data breach notification letters to impacted individuals. Based on the website breach notice, Methodist Le Bonheur is providing affected individuals with a list of the specific types of sensitive information impacted and 24 months of complimentary credit monitoring services. A link to the website breach notice is below.
If you believe you have been affected by the Methodist Le Bonheur Healthcare breach:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
