Communication Platform Breach
PATIENT NOTIFICATION
If you are visiting this page, you have received a notification regarding a security incident that occurred in July 2025 involving the communication platform used by Revere Health.
To help answer any additional concerns, we have developed Frequently Asked Questions related to this incident:
FAQs
Q: How did this security incident occur?
A third party gained unauthorized access to a Revere Health user account on the communication platform by compromising an employee’s password. Although multi-factor authentication (MFA) is a standard protection for Revere Health systems, MFA was not enabled for the platform due to a miscommunication between our organizations. This allowed the unauthorized party to access the account and view patient information before access was detected and revoked.
Q: How long was my information exposed?
Unauthorized access to the account occurred for approximately two days (July 19–21, 2025). Once suspicious activity was detected, the account was secured and access was revoked.
Q: What personal information was involved?
The information was limited to patient names, birth dates, phone numbers, email addresses, and, for a very limited subset, street addresses and provider names.
Q: Was my financial information or medical records put at risk?
No credit card, payment, or detailed medical record information was involved in this incident.
Q: Why did this information exist within the platform?
Revere Health uses secure communication platforms to coordinate patient care, appointment reminders, and direct communication. The exposed information was limited to what is required for these communications.
Q: What actions has Revere Health taken?
Revere Health takes data privacy seriously. Upon learning of this incident, we:
- Immediately secured the affected account
- Enabled enhanced login security (multi-factor authentication)
- Implemented additional safeguards and security monitoring
- Updated security risk management procedures to address potential vulnerabilities
Q: What should I do?
Revere Health believes the risk to your information is limited. However, it is always prudent to be aware of potential phishing attempts or suspicious activity related to your personal information. If you receive suspicious messages or have questions about your data, contact us using the information below.
If you have additional questions:
Email: compliance@reverehealth.com
Phone: (385) 203-1265