Diversified Services Enterprises Data Breach Investigation
According to regulatory incident data and a notice on its website, Diversified Services Enterprises reported a privacy event involving certain individuals’ information. The available records describe a hacking/IT incident and indicate that personal, financial, and medical identifiers may have been involved. Strauss Borrelli PLLC is investigating the Diversified Services Enterprises data incident and the rights of potentially affected people. If you received a notice or believe your information was involved, you may fill out the secure contact form on this page to help determine whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Diversified Services Enterprises (Healthcare)
- Incident Type: Reported hacking/IT incident involving a network
- Date of Incident: March 14 to April 14, 2025, as reported in regulatory incident data; the available company notice does not specify the period
- Discovery Date: Not disclosed in the available notice
- Official Notice Date: June 13, 2025
- Exposed Information: Names, Social Security numbers, dates of birth, driver’s license numbers, financial account numbers, and medical record numbers may have been involved
- Affected Population: 61,066 individuals were reported in regulatory incident data; the available company notice does not independently state a total
What Happened?
According to structured regulatory incident data, Diversified Services Enterprises reported a hacking/IT incident involving its network. The incident period was listed as March 14 through April 14, 2025. The available company notice does not explain how an unauthorized actor may have obtained access, whether malware or ransomware was used, or when the company discovered the event. Accordingly, the precise technical cause and scope should not be assumed beyond the disclosures currently available.
The company’s website states that it issued a Notice of Data Privacy Event on June 13, 2025, and updated the webpage on September 10, 2026. The notice says the event affected the privacy of certain individuals’ information. Separate regulatory incident data reports 61,066 affected people, although the available company webpage excerpt does not independently provide a total. Notice recipients should review their individual letters for details specific to them.
What Information Was Exposed?
Regulatory incident data identifies several categories of information that may have been involved:
- Names
- Social Security numbers
- Dates of birth
- Driver’s license numbers
- Financial account numbers
- Medical record numbers
These categories may not apply to every individual. When identity, financial, and healthcare identifiers are combined, criminals may attempt identity theft, unauthorized account activity, fraudulent patient billing, insurance verification scams, prescription-related inquiries, or medical identity theft. Affected people should also be cautious of callers or messages that reference convincing healthcare details while requesting passwords, payments, or additional personal information.
What Should You Do Next?
- Review your notice: Determine which information the company says was involved and preserve the letter, envelope, and related communications. Do not provide information through links or telephone numbers in unexpected messages claiming to concern the incident.
- Check your credit reports: Obtain reports from the three nationwide credit bureaus through AnnualCreditReport.com. Look for unfamiliar accounts, addresses, credit inquiries, or collection activity and dispute inaccurate entries promptly.
- Consider a fraud alert or credit freeze: A fraud alert asks creditors to verify your identity, while a credit freeze generally restricts access to your credit file. Contact Equifax, Experian, and TransUnion directly through their official websites.
- Monitor financial and healthcare records: Review bank activity, insurance explanations of benefits, patient portals, pharmacy records, and medical bills. Report unfamiliar withdrawals, treatments, prescriptions, providers, or insurance claims using verified contact information.
- Watch for targeted scams: Be skeptical of urgent account-verification texts, patient-billing demands, prescription inquiries, or insurance calls. Keep records of suspicious messages, related expenses, time spent responding, and any losses that may be connected to misuse of your information.
Your Legal Rights
People whose information may have been involved could have rights under state privacy, consumer-protection, or other applicable laws. Those rights depend on the facts, including the information affected, the security measures at issue, whether the person experienced identity theft or financial loss, and the jurisdiction governing a potential claim.
Receiving a notice does not automatically establish liability or guarantee compensation. Potentially affected individuals may wish to preserve notices, receipts, credit correspondence, disputed bills, and records of time spent addressing the incident. Because legal deadlines may apply, an attorney can assess whether the available facts support a claim. This general information is not individualized legal advice.
Why Hire Strauss Borrelli PLLC?
The firm’s attorneys investigate cybersecurity and privacy incidents and assess whether affected individuals may have viable claims. The evaluation can consider the sensitivity of the information involved, the adequacy and timing of notice, documented losses, and applicable privacy or consumer-protection law. Consultations are confidential, and submitting an inquiry does not obligate you to proceed.
If you received a breach notification letter from Diversified Services Enterprises:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
