On August 17, 2026, RevSpring discovered that an unauthorized person may have gained access to a support tool that could be used to obtain information about patients of RevSpring’s healthcare provider customers. RevSpring immediately implemented its incident response protocols, launched an investigation with assistance from a third-party forensic firm, and notified law enforcement. The investigation determined that the unauthorized person successfully used the support tool between May 15, 2026 and June 15, 2026 to obtain certain information about patients of some of RevSpring’s healthcare provider-customers. Customers were notified on a rolling basis, beginning on September 9, 2026.

Please note that this incident did not involve healthcare providers’ environments or access to their electronic medical record.

The information involved varies by individual, but may have included names, home addresses, email addresses, phone numbers, dates of birth, Social Security numbers, and/or locations of service/provider names. The information accessed did not include details about patients’ medical care, such as diagnosis or treatment information, and no debit or credit card numbers or bank account information was involved.

On behalf of RevSpring’s customers who request it, RevSpring will begin mailing notification letters to individuals whose information was involved in this incident and for whom RevSpring has sufficient contact information. The letters, which began mailing on November 4, 2026, remind individuals that it is always a good idea to be vigilant for incidents of fraud or identity theft by reviewing the statements they receive and/or free credit reports for any suspicious activity. RevSpring is offering access to complimentary credit monitoring and identity theft protection services through a vendor, Kroll, and the notification letters contain instructions about how to sign up for credit monitoring.

RevSpring regrets this incident occurred and apologizes for any concern it may have caused. In addition to its existing cybersecurity tools, RevSpring has implemented new technical safeguards and other measures to reduce the likelihood of a similar event occurring in the future.

If you have questions about the incident, please contact the dedicated, toll-free call center RevSpring established at (844) 971-8621, available Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time (excluding major U.S. holidays)

Advertisement Date:November 11, 2026

Ad# 106541