Hillcrest Convalescent Center Data Breach Exposes Patient Data

Hillcrest Convalescent Center and Hillcrest Raleigh at Crabtree Valley, long-term care facilities in Maryland, recently reported a data breach. On March 3, 2025, they disclosed a cybersecurity incident that compromised highly sensitive patient and resident records.

The exposed data includes critical categories such as Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Home Address, and Phone Number. The exposure of this personal health and identity data can lead to serious long-term risks for victims.

Unlike a credit card number that can be easily changed, sensitive medical and identity information, once exposed, can be exploited for medical identity theft, fraudulent loan applications, or other forms of financial fraud for years to come. This breach highlights the significant challenge victims face in protecting themselves moving forward.

Hillcrest Convalescent Center and Hillcrest Raleigh at Crabtree Valley were legally bound by federal laws like HIPAA and state regulations to protect this confidential information. A security incident of this nature suggests that their digital safeguards might have been insufficient, potentially failing in their duty to care for patient data.

If you received a data breach notification letter from either Hillcrest facility, it confirms your personal and health information was compromised. This means you may have legal grounds to seek accountability and potential compensation for the harm caused by this exposure.

Understanding your legal rights and available recourse is a crucial next step. Our team is offering free case reviews to help individuals affected by this breach assess their options. You pay nothing out-of-pocket, and we only get paid if we successfully recover compensation for you.