Healthcare Services Group reports data breach exposing information of over 624 K individuals
Learn More
Healthcare Services Group, Inc. (HSGI), a Pennsylvania-based healthcare support services provider, is reporting a data breach that compromised the personal and financial information of 624,496 individuals across the United States.
The company detected unauthorized access to its network on October 7, 2024. The investigation confirmed that the breach had begun on September 27. Attackers maintained access to company systems for approximately one week before discovery. The attackers stole data from the systems. Exposed data includes:
- Full names
- Social Security numbers
- Driver's license numbers
- State identification numbers
- Financial account information
- Account access credentials (usernames, passwords, security questions)
The nature of the attack is not disclosed. The hospital initially reported the incident to SEC on October 16, 2024, and confirmed that personal data was stolen by June 3, 2025.
HSGI started notifying customers on August 25, 2025 and is offering 12 and 24-month credit monitoring and identity theft protection services coverage to individuals affected by the breach, depending on the severity of the exposed data.
