Sutherland Healthcare Solutions confirmed that an unauthorized individual accessed names, addresses, dates of birth, Social Security numbers, health plan information, and insurance claims data between July 2024 and July 2026. The company has not found evidence of data misuse but mailed notification letters in November 2026. Affected individuals should enroll in the free identity theft protection offered and monitor their credit reports closely.
| Company | Sutherland Healthcare Solutions |
|---|---|
| Industry | Healthcare |
| Data Types Exposed | Full Names, Home Addresses, Dates of Birth, Health Plan Information, Social Security Numbers, Health Insurance Claims Data, Stated Gender |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unauthorized Access |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Sutherland Healthcare Solutions Data Breach?
Sutherland Healthcare Solutions has confirmed a data privacy incident involving unauthorized access to sensitive health plan information. The company provides revenue cycle management, provider credentialing, medical coding, and digital transformation services to healthcare payers and providers. As a result, it handles large volumes of personal and health-related data on behalf of its clients.
According to the company’s notification letters, an employee arranged for another person to perform their work duties without the company’s knowledge. This arrangement allowed an unauthorized individual to access internal systems over an extended stretch of time. Unauthorized access to its network occurred in July 2026, though the company later determined the access actually began in July 2024 and continued intermittently for nearly two years.
Once Sutherland discovered the unauthorized arrangement, it moved quickly to cut off the employee’s access rights. The company then launched an investigation to figure out exactly which health plans and individuals were affected. Because multiple health plan clients were involved, Sutherland had to coordinate with each one separately to confirm the scope of exposed data before sending notification letters in November 2026.
Who was affected?
The breach affects individuals whose information was processed by Sutherland Healthcare Solutions on behalf of its health plan clients. Because Sutherland works with healthcare payers and providers across the country, the affected population likely includes members of multiple health insurance plans rather than customers of a single company.
Sutherland has not publicly disclosed the total number of individuals affected. In addition, the incident had not yet appeared on the HHS Office for Civil Rights breach portal at the time notification letters went out. This means the full scope, including whether minors or dependents on family health plans were involved, remains unclear.
What Information Was Potentially Exposed?
Based on Sutherland’s own notification letters, the unauthorized individual accessed several categories of sensitive personal and health plan information. This data varied by person, since not every affected individual necessarily had every category exposed.
- Full names
- Home addresses
- Dates of birth
- Health plan information
- Social Security numbers
- Health insurance claims data
- Stated gender
This combination of data creates meaningful identity theft risk. When a Social Security number is paired with a full name, address, and date of birth, criminals have nearly everything needed to open new credit accounts or file fraudulent tax returns. As a result, affected individuals should treat this incident seriously even though Sutherland has not found evidence of misuse so far.
Beyond general identity theft, the exposure of health plan and claims data raises the possibility of medical identity fraud. Someone with this information could potentially submit fraudulent insurance claims or obtain medical services using another person’s identity. Because health insurance claims data can reveal diagnoses or treatment history, affected individuals may also have privacy concerns beyond financial fraud.
What is the company doing?
Sutherland Healthcare Solutions says the unauthorized access does not appear to have been malicious in nature. Importantly, the company states it has not identified any evidence that the exposed data has been misused. Nonetheless, Sutherland terminated the involved employee’s access rights as soon as the arrangement was discovered.
In response to the incident, Sutherland has implemented additional technical and administrative safeguards designed to prevent similar situations going forward. The company has also offered affected individuals complimentary identity theft protection services as a precaution. Notification letters were mailed to affected individuals in November 2026, informing them of the specific data involved in their case.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Affected individuals should request a copy of their credit report from each of the three major credit bureaus. Reviewing these reports regularly helps you spot unfamiliar accounts or inquiries before they cause serious financial damage. Federal law allows you to request a free credit report from each bureau on a regular basis.
In addition, consider spacing out your requests across the year so you have ongoing visibility into your credit file. If you notice any account you don’t recognize, dispute it immediately with the bureau and the creditor involved. Acting quickly limits the damage a fraudster can do with stolen information.
Consider a Fraud Alert or Credit Freeze
Because Social Security numbers were involved in this breach, a credit freeze offers strong protection against new account fraud. A freeze blocks lenders from accessing your credit file, which makes it much harder for identity thieves to open accounts in your name. You can freeze your credit for free with each bureau and lift it temporarily whenever you need to apply for credit.
Alternatively, a fraud alert requires creditors to verify your identity before approving new credit. This option is less restrictive than a freeze but still adds a layer of protection. Given the sensitivity of the data exposed here, many affected individuals may prefer the stronger protection a freeze provides.
Watch for Medical and Insurance Fraud
Because health insurance claims data was exposed, affected individuals should also review their insurance statements carefully. Look for any Explanation of Benefits documents that describe services you never received. If you spot anything unusual, contact your health plan immediately to report possible fraud.
Furthermore, keep an eye out for collection notices tied to medical bills you don’t recognize. Medical identity theft can take longer to detect than financial fraud, since bills may not surface right away. Contacting your insurer proactively can help catch fraudulent claims before they escalate.
Enroll in the Identity Theft Protection Services Offered
Sutherland has made complimentary identity theft protection services available to affected individuals. This service can typically alert you to suspicious activity involving your personal information, such as new account openings. Enrolling costs nothing and only takes a few minutes, so it’s worth taking advantage of this offer right away.
Because enrollment often requires an activation code from your notification letter, keep that letter in a safe place. If you believe you were affected but did not receive a letter, contact Sutherland directly to confirm your status. This ensures you don’t miss the window to sign up for the complimentary protection.
Stay Alert for Phishing Attempts
After a breach like this, scammers sometimes use exposed information to craft convincing phishing emails or phone calls. Be cautious of any message asking you to verify personal details or click on unfamiliar links. Legitimate organizations will never ask for your Social Security number or password through an unsolicited email.
Instead of clicking links in suspicious messages, go directly to the official website or call a verified phone number. This simple habit can prevent scammers from tricking you into handing over even more sensitive information. If something feels off, trust that instinct and verify independently before responding.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.