Northern Colorado Rehabilitation Hospital Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Northern Colorado Rehabilitation Hospital regarding its recent data breach. The Northern Colorado Rehabilitation Hospital data breach involved personal identifiable information and protected health information belonging to an undetermined number of individuals.


Northern Colorado Rehabilitation Hospital is a part of Ernest Health, a network of 36 rehabilitation and long-term acute care hospitals based in Texas. Founded in 2004, Ernest Health hospitals see patients who are often recovering from disabilities caused by injuries or illnesses, or from chronic or complex medical conditions.2 Today, Ernest Health hospitals share information, knowledge, and resources — so they can continually evaluate and improve the delivery of care to their patients.2 Headquartered in Mesquite, Texas, Ernest Health hospitals are located throughout the United States in Arizona, California, Colorado, Idaho, Indiana, Montana, New Mexico, Ohio, South Carolina, Texas, Utah, Wisconsin, and Wyoming and employs over 1,000 individuals. Northern Colorado Rehabilitation Hospital is located in Johnstown, Colorado.


Recently, Northern Colorado Rehabilitation Hospital discovered that it had experienced a data breach in which personal identifiable information and protected health information may have been accessed and acquired. Through its investigation, Northern Colorado Rehabilitation Hospital determined that an unauthorized party may have accessed this sensitive information between January 16, 2024, and February 4, 2024. On March 29, 2024, Northern Colorado Rehabilitation Hospital began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Driver’s license information
  • Address
  • Date of birth
  • Medical information (e.g., medical record number, diagnosis, prescription information)
  • Health insurance information (e.g., plan member ID, claims data)

If you received a breach notification letter from Northern Colorado Rehabilitation Hospital:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Northern Colorado Rehabilitation Hospital data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Northern Colorado Rehabilitation Hospital;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: