{
  "id": "mpowerhealth-network-data",
  "url": "https://ohshit.app/incidents/mpowerhealth-network-data/",
  "title": "MPOWERHealth reports possible exposure of health and identity data after network intrusion",
  "level": 3,
  "level_name": "sharted",
  "date": "2026-11-13",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "Data breach",
    "Personal information"
  ],
  "ecosystems": [],
  "summary": "MPOWERHealth detected unauthorized access to part of its network in June 2025. It began notifying people on November 13, 2026 after identifying files that may contain sensitive personal or health data.",
  "splash": "People named in MPOWERHealth’s notification about files accessible during the network intrusion.",
  "wipe": "Verify your notice, review insurance and account records, and check your credit if identity data was involved.",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Confirm the affected fields",
      "hint": "Verify unexpected messages against the company’s public notice. Call (844) 301-0181, weekdays 9:00 a.m. to 6:30 p.m. Eastern Time excluding major U.S. holidays, to ask about your notice."
    },
    {
      "title": "Check health and financial records",
      "hint": "Compare insurance explanations of benefits with care you received and report unfamiliar entries to the insurer or provider. For identity or financial data, inspect credit reports and account statements. Consider a freeze at each major credit bureau if identity documents were involved."
    }
  ],
  "sources": [
    {
      "name": "MPOWERHealth November 13 notice",
      "url": "https://mpowerhealth.com/notice-of-data-security-incident/",
      "says": "Identifies the investigation dates, possible data fields, contact and protective steps.",
      "primary": true
    },
    {
      "name": "California Attorney General filing",
      "url": "https://oag.ca.gov/ecrime/databreach/reports/sb24-632869",
      "says": "Lists June 23 and 26, 2025 incident dates and the company’s notice.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "MPOWERHealth confirmed unauthorized access; individual data scope varies.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Jun 26, 2025",
      "title": "MPOWERHealth detects the intrusion",
      "body": "The company says it secured its network, notified law enforcement and brought in external investigators."
    },
    {
      "date": "Oct 20, 2026",
      "title": "The review identifies possibly affected personal data",
      "body": "The affected fields vary by individual and may include health and financial information."
    },
    {
      "date": "Nov 13, 2026",
      "title": "MPOWERHealth publicly describes the incident and starts notifications",
      "body": "The company opens a dedicated inquiry line and gives steps to check for misuse."
    }
  ],
  "body_markdown": "MPOWERHealth says the unauthorized party reached a limited part of its internal network. The company does not disclose the entry method or a victim total. Potentially affected fields differ by person and include names, birth dates, Social Security numbers, driver’s license or government identification numbers, financial account information, and medical or insurance data. The company reports no evidence of medical-information misuse."
}