Lake Region Healthcare Data Breach Investigation
Lake Region Healthcare Corporation has reported a data security incident that may have involved personal and health-related information. According to the company’s notice, unauthorized access to its network was detected on or about May 19, 2025, and the review of affected data concluded on June 5, 2026. Reported data elements may include Social Security numbers, dates of birth, and medical or insurance information, although not every person was necessarily affected in the same way. If you received a notice or are concerned your information was involved, you can fill out the form on this page to ask whether you may qualify for a claim.
Lake Region Healthcare Corporation is a Minnesota healthcare provider. According to its public notice, the organization reported a data security incident involving information stored on its network and said it is notifying potentially affected individuals.
Key Facts at a Glance
- Company: Lake Region Healthcare Corporation
- Industry: Healthcare
- Location: Minnesota
- Incident type: Reported hacking/IT incident involving unauthorized access to the network
- Detection date: According to the notice, unauthorized access was detected on or about May 19, 2025.
- Notice timing: The company says its review of the affected data concluded on June 5, 2026, and notice was then provided by U.S. mail where mailing addresses were available.
- Potentially affected data: Personal, medical, insurance, identification, and financial-related information may have been involved.
- Reported population: State Attorney General filings list 167,617 individuals as potentially affected.
- Support line: 1-844-507-9987
- Protection offered: The notice says complimentary identity theft protection services are being offered.
What Happened?
According to the company’s notice, it detected unauthorized access to its network on or about May 19, 2025. The notice states that the organization then took steps to secure its systems and worked with outside cybersecurity professionals to investigate what happened. It also says a review was performed to determine which individuals and which categories of information may have been involved, and that review concluded on June 5, 2026.
The public notice uses cautious language and says the incident may have resulted in the exposure of certain data stored on the network. The company further states that it was not aware of unauthorized use of personal information at the time of the notice. Even so, when Social Security numbers and health information may be at issue, it is reasonable for affected people to monitor accounts and keep records of any suspicious activity.
What Information Was Exposed?
According to the notice, the information that may have been involved included one or more of the following categories:
- Name
- Date of birth
- Social Security number
- Medical record number
- Patient account number
- Health insurance information
- Contact information
- Medical and/or treatment information
- Government-issued identification
- Financial information
The notice also says not every data element was affected for every individual. That matters because the level of risk can differ depending on whether the information involved was limited to contact details, or instead included sensitive items such as a Social Security number, insurance information, or treatment-related records.
What Should You Do Next?
- Read any letter you received carefully. Check what the company says may have been involved in your case and note any deadlines for enrolling in the complimentary identity theft protection services.
- Monitor financial accounts and credit activity. Review bank statements, credit card transactions, and your credit reports for unfamiliar activity, especially if your Social Security number or financial information may have been involved.
- Review medical and insurance records. Watch for unfamiliar charges, claims, or explanation of benefits statements that do not match the care you actually received.
- Consider a fraud alert or security freeze. A fraud alert can make it harder for identity thieves to open new accounts, and a security freeze can restrict access to your credit file unless you lift it.
- Be alert for phishing attempts. After a reported security incident, scammers sometimes send emails, texts, or calls that appear related to the notice. Do not click unknown links or give out additional personal information unless you verify the source.
- Keep documentation. Save the notice, screenshots, credit monitoring enrollment records, and any evidence of suspicious activity or time spent dealing with the issue.
- Ask questions if you need clarification. The company lists a dedicated response line at 1-844-507-9987. If you want to understand your legal options, you can also fill out the form on this page to contact Strauss Borrelli PLLC.
Your Legal Rights
If your personal information was involved in this reported incident, you may have legal rights depending on the facts, the type of data at issue, and the laws that apply. In many data incident matters, individuals may seek more information about what happened, what categories of data were involved, what protective services are being offered, and whether they have claims related to alleged failures to safeguard sensitive information.
Healthcare-related incidents can raise added concerns because they may involve both financial identifiers and private medical details. Whether a legal claim exists will depend on facts that may still be developing, so it is important not to assume either that a claim is guaranteed or that no action is available. Preserving your notice letter, credit or insurance irregularities, out-of-pocket expenses, and time spent responding can be helpful if you later decide to speak with counsel.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents consumers in data breach and privacy matters, including cases involving Social Security numbers, financial information, and medical data. Our team focuses on explaining reported incidents in plain language, evaluating the available facts carefully, and helping people understand whether further action may make sense.
If you received a notice connected to this event or have concerns about misuse of your information, our firm can review the reported circumstances and discuss possible next steps. We aim to make that process straightforward, respectful, and informed by the documents that are publicly available and any records you may have kept.
If you received a breach notification letter from Lake Region Healthcare:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
