Pittman, Dutton, Hellums, Bradley & Mann, P.C. is investigating a major data breach involving Healthcare Services Group, Inc. (HSG), a Pennsylvania-based provider of environmental, dining, and nutritional services to healthcare facilities. The breach reportedly compromised the personal and protected health information of 624,496 individuals, including nearly 4,000 residents of Maine.
HSG first disclosed the incident on October 16, 2024, in a Form 8-K filing with the Securities and Exchange Commission. According to the company, unauthorized activity was discovered in its systems on October 9, 2024, though the investigation later determined the breach began as early as September 27, 2024.
With assistance from third-party cybersecurity experts, HSG launched a full investigation and initiated its incident response plan. While initial disclosures suggested the incident would not materially impact financial operations, a review completed on June 3, 2025, confirmed that personal and health information was potentially stolen. Notification letters were mailed beginning August 25, 2025.
The specific categories of information compromised have not yet been disclosed. Both personally identifiable information (PII) and protected health information (PHI) may have been involved, but a website error has prevented public access to the official breach notification letter. As a result, details about the data stolen and the nature of the cyberattack remain unclear.
Headquartered in Bensalem, Pennsylvania, HSG provides support services to over 3,000 healthcare facilities in 48 states and employs more than 45,000 individuals nationwide.
In addition to notifying individuals, HSG has offered complimentary credit monitoring and identity theft protection services to those affected. The company has also filed required reports with state and federal regulators.
If you received a notification from Healthcare Services Group, your personal and medical information may have been compromised. At Pittman, Dutton, Hellums, Bradley & Mann, P.C., we represent victims of healthcare data breaches and privacy violations nationwide.
You may be entitled to:
We offer free, confidential consultations, and you pay nothing unless we recover compensation for you.
Call (205) 322-8880 or fill out our secure online form to learn your legal options. Your health and personal data should be protected. If Healthcare Services Group failed to secure it, we are here to help you fight back.
Fill out the form below to contact our firm. One of our experienced attorneys is prepared to speak with you. Consultations are free and confidential.