CCM Health Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating CCM Health regarding its recent data breach. The CCM Health data breach involved personal identifiable information and protected health information belonging to over 25,000 individuals.


CCM Health is a unified medical services provider based in Montevideo, Minnesota. Founded in 1910, CCM Health provides physical, emotional, mental, and social health services to the local community and surrounding regions.3 Additionally, CCM Health’s surgical and medical services include: primary care, general surgery, orthopedics, podiatry, obstetrics/gynecology, allergy, audiology, ophthalmology, urology, ENT, dermatology, oncology, cardiology, nephrology, neurological care, and behavioral bealth.3 Today, CCM Health has two additional clinics in Minnesota and employs over 200 individuals.


Recently, CCM Health discovered that it had experienced a data breach in which personal identifiable information and protected health information in its systems may have been accessed and acquired. Through its investigation, CCM Health determined that an unauthorized party may have accessed this sensitive information between April 3 and April 10, 2023. On March 12, 2024, CCM Health began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Date of birth
  • Medical information (e.g., medical record number, patient account number, prescription information, healthcare provider’s name, medical diagnosis, diagnosis code, treatment type, treatment location, treatment date, admission date, discharge date, and/or lab results) 
  • Health insurance information

If you received a breach notification letter from CCM Health:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the CCM Health data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by CCM Health:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: