Medical Data Breach Exposes 23,000 Patient Records

In March 2025, Compassion Health Care was targeted by the Safepay ransomware group. The attackers gained unauthorized access to internal servers, exfiltrating 107GB of data including clinical notes, patient PII, and employee bank details. The breach forced the provider to pivot to remote-only services for several weeks while forensic investigators sanitized the network. Over 23,000 individuals were formally notified of the exposure in early April.