Knoxville, TN – Covenant Health, a regional healthcare provider, is notifying nearly 500,000 patients of a data breach impacting their personal information. The healthcare system detected a cyberattack on May 26, 2025, but an investigation revealed unauthorized access to patient data began as early as May 18, 2025.

Covenant Health operates hospitals and healthcare facilities across East Tennessee and Kentucky. The compromised data may include names, addresses, dates of birth, Social Security numbers, health insurance information, and medical records. The exact scope of the data accessed is still under investigation, according to a statement released by the company.

In response to the breach, Covenant Health is offering affected individuals complimentary credit monitoring and identity theft protection services. The company stated it is working with cybersecurity experts to investigate the incident, enhance security measures, and prevent future attacks. They are also notifying relevant regulatory agencies.

“We understand the concern this incident causes our patients and are committed to providing them with the resources and support they need,” a Covenant Health spokesperson said in a press release. The healthcare provider is urging patients to review their credit reports and be vigilant for any signs of identity theft. Additional information and resources are available on the Covenant Health website and through a dedicated call center established to address patient inquiries.

Data breaches in the healthcare industry are increasingly common, often targeting sensitive patient information for financial gain. This incident highlights the ongoing challenges healthcare organizations face in protecting patient data in the face of sophisticated cyber threats. Covenant Health says it is reviewing and strengthening its security protocols as a result of this event.