Nearly half a million patients exposed in healthcare breach - here's what we know

Ransomware.

• Covenant Health’s May 2025 cyberattack affected far more patients than first reported - nearly 500,000 instead of 8,000
• Data stolen included names, addresses, DOBs, SSNs, health insurance details, and treatment information
• Russian-speaking Qilin group claimed responsibility, leaking 852GB of files; Covenant offers victims 12 months of identity theft protection

The May 2025 cyberattack affecting Covenant Health is now understood to be a lot more destructive than initially thought, as the number of affected people seems to have grown significantly.