Posted May 28, 2025
Erlanger is required to notify affected individuals of the improper access, use, or disclosure of their patient information, call Protected Health Information (PHI). On April 29, 2025, Compumedics USA Inc. (“Compumedics”), notified Erlanger of a breach. Compumedics is a third-party vendor used by Erlanger for sleep studies.
Report of the incident as relayed by Compumedics: In March 2025, Compumedics detected suspicious activity in their systems. Compumedics took steps to investigate the event, contain the activity, and eradicate the unauthorized access. The investigation determined that the Compumedics system was accessed by threat actors between March 13, 2025, and March 24, 2025. During this time, certain files were viewed or copied. As a result, Compumedics began a review of the files to determine what information they contained and to which Compumedics client’s data may have been impacted.
Compumedics informed Erlanger that they implemented additional security measures and provided additional training to their employees to further protect against similar incidents moving forward. Compumedics confirmed that data belonging to Erlanger patients might have been included in the information compromised. Information potentially compromised includes name, birth date, medical record number, date of service, and limited medical information associated with sleep studies. Financial Information and Social Security Number were NOT involved. Importantly, not every affected individual had all of these data elements impacted, or the same combination of data elements impacted. Erlanger has no evidence of identity theft or fraud as a result of this incident. This incident has been reported to law enforcement and regulators.
Notice of the incident is being provided to the potentially affected individuals. Unless you have been a patient at Erlanger Sleep Center since 2021, you are unlikely to be affected. A dedicated toll-free phone number 1-833-304-3838 has been established to address questions related to this incident.