Patient Notification
Revere Health Security Incident – August 6, 2025
If you are visiting this page, you have received a notification regarding a recent security incident involving a Revere Health employee email account.
We understand you may have additional questions, so we have provided the following information to help explain what happened, what information was involved, and what steps you can take to protect yourself.
Frequently Asked Questions (FAQs)
Q: What happened?
On August 6, 2025, Revere Health detected unauthorized activity in an employee’s email account. Our security systems alerted us to suspicious email forwarding rules, and our IT team immediately investigated. We determined that an unauthorized individual had accessed the employee’s account and sent phishing emails to external recipients. Access to the account was revoked the same day, and additional safeguards were implemented to prevent future incidents.
Q: How long was my information at risk?
Our security monitoring tools detected and stopped the unauthorized access within hours of the activity. The account was disabled and secured on the same day the incident occurred.
Q: What information was involved?
The compromised email account contained information for fewer than 500 patients. Depending on the individual, this information may have included your:
- Name
- Date of Birth
- Medical Record Number (MRN)
- Email Address
A very small number of patients (three in total) also had Social Security numbers (SSNs) included in the account.
No financial information, such as credit card or bank account numbers, was involved.
Q: Was my information misused?
At this time, we have no evidence that any patient information has been misused. However, because patient data was present in the compromised account, we are notifying potentially affected patients out of an abundance of caution.
Q: What is Revere Health doing to protect my information?
Revere Health takes the privacy and security of patient information very seriously. As soon as the incident was discovered, we:
- Revoked unauthorized access and secured the affected account.
- Corrected a system configuration issue that allowed the unauthorized login.
- Enhanced our security protocols and monitoring tools.
- Strengthened employee training on email and phishing awareness.
For the three patients whose SSNs were involved, Revere Health is providing 24 months of complimentary credit monitoring and identity theft protection.
Q: What should I do?
For most patients, the risk of harm is low. However, we recommend that you:
- Remain alert for any unusual activity involving your personal information.
- Review account statements and explanation of benefits for errors.
- Report any suspicious activity to the appropriate institution.
If your letter states that your Social Security number was involved, please follow the enrollment instructions for the free credit monitoring services provided.
Q: How can I get more information?
If you have additional questions, please reach out to our compliance team:
- Email: compliance@reverehealth.com
- Phone: (385) 203-1265