What Is This About?

If you are a current or former patient and/or employee of Kettering Health (“Kettering”) your sensitive personal and protected health information may have been compromised. Kettering recently reported that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

On May 20, 2025, Kettering Health became aware of a cybersecurity incident that impacted its IT network. In response, Kettering Health immediately launched an investigation to determine the nature and scope of the incident, working closely with third-party cybersecurity experts and law enforcement. While the organization was able to restore access to its Electronic Health Records (EHR) system, several other IT systems remain offline as the recovery process continues.
As the investigation progressed, Kettering Health confirmed that a ransomware group known as Interlock was behind the attack. Interlock has claimed responsibility and alleges that it stole approximately 941 GB of data, including 732,490 files across 20,418 folders. Kettering has acknowledged that a small subset of patient data was stolen in the attack, although the full extent of the breach is still being assessed. On May 30, 2025, Kettering Health provided an update to its staff, partners, and community members about breach communications.

What Information Was Impacted?

Although there is not much public information available on the Kettering data breach yet, the breach exposed personal information. Possible exposed information may include:
    • Name;
    • Payroll information;
    • Employee files;
    • Scan of identity documents;
    • Police Security personnel files;
    • Medicaid application documents;
    • Pharmacy and blood bank documents;
    • Financial revenue reports;
    • Corporate insurance filed;
    • Corporate tax information;
    • Budget reports; and
    • Patient files.
 

What Action Can You Take?

My Data Breach Attorney is investigating whether affected users are entitled to compensation. If you received a notice from Kettering Health there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.

About Kettering Health

Kettering Health is a not-for-profit network of hospitals, outpatient facilities, and healthcare providers based in southwest Ohio. Affiliated with the Seventh-day Adventist Church, Kettering Health is committed to improving the quality of life for the communities it serves through faith-based, compassionate care. Kettering Health is a not-for-profit network of hospitals, outpatient facilities, and healthcare providers based in southwest Ohio.

About

My Data Breach Attorney

Backed by the nationally recognized law firm Levi & Korsinsky, we combine decades of legal expertise with an unwavering focus on consumer advocacy. Levi & Korsinsky is a nationally recognized consumer advocacy law firm that has recovered hundreds of millions of dollars against the largest of corporations. The firm is a 100% contingency firm – we don’t get paid unless you get paid! Prior results do not guarantee similar outcomes.

Frequently Asked Questions

Know Your Legal Rights After a Data Breach Incident

A data breach occurs when sensitive, confidential, or protected information is accessed, disclosed, or stolen without authorization. This may include personal data, financial information, medical information, or business secrets.

Our firm provides the following services:

  • Investigating the breach and determining liability.
  • Filing lawsuits or claims against negligent companies.
  • Helping recover financial damages.
  • Advising on legal steps to protect your rights.

As a consumer, you have the right to:

  • Be notified of the breach under U.S. laws, such as the California Consumer Privacy Act (CCPA) or General Data Protection Regulation (GDPR) if applicable.
  • Seek compensation for financial or reputational harm.
  • Take legal action against the entity responsible for negligence.

Depending on the case, you may be entitled to:

  • Reimbursement for financial losses (e.g., identity theft).
  • Compensation for emotional distress or loss of privacy.
  • Punitive damages if negligence is proven.

Yes, time is critical. If you suspect your data has been compromised:

  • Secure your accounts by changing passwords.
  • Monitor your credit reports for unusual activity.
  • Contact a law firm to explore legal options for compensation.

Our firm works on a contingency fee basis, meaning you pay nothing upfront. We only get paid if we recover compensation for you.