Aya Healthcare Data Breach Investigation
Strauss Borrelli PLLC, a leading data breach law firm, is investigating Aya Healthcare, Inc. regarding its recent data breach. The Aya Healthcare data breach may have involved sensitive personal information belonging to over 3,000 individuals.
ABOUT AYA HEALTHCARE, INC.:
Aya Healthcare is a healthcare staffing company based in California. Today, Aya Healthcare operates a digital staffing platform delivering every component of healthcare-focused labor services, including travel nursing and allied health, per diem, permanent staff hiring, interim leadership, locum tenens and non-clinical professionals.2 Additionally, Aya Healthcare offers a software suite that provides hospital systems greater efficiencies and superior operating results through vendor management, float pool technology, provider services and predictive analytics.2 Headquartered in San Diego, California, Aya Healthcare places professionals throughout the country and employs over 5,000 individuals.
WHAT HAPPENED?
Recently, Aya Healthcare reported to the Attorney General of Maine that the sensitive personal identifiable information in its care may have been compromised. According to the breach notice, on January 12 and 19, 2025, Aya Healthcare learned that unauthorized parties were using lists of credentials (obtained elsewhere) to gain access to user accounts on Aya Healthcare’s systems.1 As a result, Aya Healthcare launched an investigation to determine the nature of the incident.
Through its investigation, Aya Healthcare confirmed that sensitive personal information in user accounts may have been compromised by an unauthorized third party during the breach. As a result, Aya Healthcare began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:
- Name
- Social Security number
- State nursing license number
- Vaccination status
- Contact information such as phone number, address, and email address
On February 27, 2025, Aya Healthcare began mailing data breach notification letters to impacted individuals. Based on the breach notices provided to the Maine residents, Aya Healthcare is providing affected individuals with a list of the information impacted and 24 months of complimentary credit monitoring services. A link to the form breach notification letter that Aya Healthcare filed with the Attorney General of Maine is below.
If you received a breach notification letter from Aya Healthcare, Inc.:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
