Aspire Rural Health System
Data Breach Class Action Lawsuit

Posted: August 22, 2025 -- Attention, victims of the Aspire Rural Health System data breach.

Abington Cole + Ellery is investigating the data breach recently announced by Aspire Rural Health System.

Aspire Rural Health System Data Breach Summary:

Approximately 138,000 individuals were affected by the Aspire Rural Health System data breach, and breached data may include, but is not necessarily limited to: names, dates of birth, Social Security numbers, driver’s license numbers, medical treatment and diagnosis data, prescription data, individual health insurance data, financial account numbers and routing numbers, payment card numbers and access PIN numbers, payment card expiration dates, lab results, provider data, password and usernames, biometric identifiers, medical record numbers, patient identification numbers, and passport numbers.

Aspire Rural Health System (“Aspire”) has identified a security incident involving its internal network that may have exposed certain personal information. Aspire is notifying individuals whose information may have been involved and providing resources to help them protect their data.

Aspire determined that an unauthorized party accessed its network between November 4, 2024, and January 6, 2025. Once the activity was detected, Aspire says it contained the incident and launched an investigation. The organization says it engaged cybersecurity experts to secure its systems and determine the scope of the event.

On July 18, 2025, following a forensic review and manual document analysis, Aspire confirmed that certain files accessed during the incident contained personally identifiable information and protected health information relating to a limited number of individuals. Aspire says it has notified potentially affected individuals and continues to take steps to safeguard its systems.

As a result of the data breach, Aspire Rural Health System is offering 12 months of free credit monitoring and/or identity theft protection services to some affected individuals.

Additional information about the Aspire Rural Health System data breach may be found here: Aspire Rural Health System Data Breach Notification, and here: Aspire Rural Health System NOTICE OF DATA SECURITY INCIDENT. The Aspire Rural Health System Website may also have additional information about or provide periodic updates regarding the data breach.

Are you a victim of the Aspire Rural Health System data breach?

If you are interested in potentially volunteering to serve as a class representative in a class action lawsuit against Aspire Rural Health System, please submit your information here to be considered:



An attorney-client relationship is not formed by submitting information through this website.


About Aspire Rural Health System:

Aspire Rural Health System comprises three hospitals—Deckerville Community Hospital, Hills & Dales Healthcare, and Marlette Regional Hospital—together operating under a unified system name. Each hospital maintains its own identity while collaborating through shared governance and operational coordination. The system serves residents in multiple counties across Michigan, including Huron, Sanilac, Tuscola, and Lapeer.

The system offers a range of healthcare services through varying facilities. Services include emergency care, outpatient visits, diagnostic testing, surgical procedures, hospice services, senior residential care through the Heartlands community, pharmacy access, women’s health services, family healthcare, specialty clinics, and rapid care in select locations. The Heartlands community provides independent living, assisted living, memory care apartments, and supportive services such as a shared community center.

Since early 2024, the system has worked with Covenant Healthcare under a multi‑year affiliation agreement to bring cardiology services and comprehensive cancer care to Aspire facilities. In 2025, facility updates included the expansion of outpatient services in Bad Axe to add rapid care, lab, imaging, pulmonary testing, and specialty providers, as well as new surgical staff at Cass City and Marlette campuses.

For more information about steps you can take to possibly reduce the chances harm arising from a data breach, please review the following article: What are some steps you can take if you've been the victim of a data breach?

If you believe you are a victim of the Aspire Rural Health System data breach, and if you would like to volunteer to serve as a class representative in a class action lawsuit regarding this data breach, please submit your information via the form on this webpage. This website is not associated with nor authorized by Aspire Rural Health System or any affiliated companies. If you have received any other data breach notifications, you may to review Abington Cole + Ellery's current list of data breach investigations.