What Is This About?

If you received an email or letter about a data breach from RevSpring, Inc., a Nashville, Tennessee company that provides billing and payment systems to healthcare providers, your personal and protected health information may be at risk from a data breach. Our firm is investigating this incident and can help you understand your rights and legal options.

What Happened?

RevSpring discovered that an unauthorized person gained access to a RevSpring support tool and successfully used it to obtain information about patients that used RevSpring’s bill pay platform. The unauthorized access period ran from May 15, 2026, to June 1, 2026. RevSpring first discovered the possibility of this access on August 18, 2026, and confirmed it at a later data following an investigation with the assistance of outside cybersecurity experts.

On November 4, 2026, RevSpring reported the data breach to the Vermont Attorney General’s Office, indicating that 569 Vermont residents were among those affected, and that Social Security numbers were among the compromised data. The same day, RevSpring reported the breach to the California Attorney General’s Office. RevSpring is sending notice letters or emails to affected individuals.

What Information Was Impacted?

According to RevSpring’s report to the Vermont Attorney General, as well as the nature of RevSpring’s business, the following categories of information may have been involved:

• Names;
• Social Security numbers;
• Financial account information;
• Health information;
• Health insurance information; and
• Other sensitive personal information or protected health information.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected persons are entitled to compensation. If you received a notice letter or email from RevSpring, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.