On February 14, 2025, American Renal Management LLC d/b/a Innovative Renal Care (“IRC”) filed a notice of data breach with the Attorney General of Massachusetts after discovering that an unauthorized actor accessed and copied information from its computer network. In this notice, Innovative Renal Care explains that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, including their names, addresses, dates of birth, Social Security numbers, driver’s license numbers, financial account information, electronic signatures, health insurance information, medical information, and prescription information. Upon completing its investigation, Innovative Renal Care began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Innovative Renal Care, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Innovative Renal Care data breach. For more information, please see our recent piece on the topic here.
What Caused the Innovative Renal Care Data Breach?
The Innovative Renal Care data breach was previously announced back in 2024; however, at the time, the company provided very little details about the incident. More recently, Innovative Renal Care filed notice of the incident with the Attorney General of Massachusetts, and this notice provides much more information on what led up to the breach. IRC also posted a website notice discussing the incident.
According to all available sources, on February 29, 2024, Innovative Renal Care detected suspicious activity within its computer network. In response, Innovative Renal Care secured its systems and then launched an investigation to learn more about the incident and determine whether any consumer information may have been compromised as a result.
Ultimately, Innovative Renal Care’s investigation confirmed that an unauthorized party was able to access certain parts of its computer network between February 21, 2024 and March 1, 2024. Innovative Renal Care also learned that the unauthorized party was able to access files and folders containing confidential consumer information.
After learning that sensitive consumer data was accessible to an unauthorized party, Innovative Renal Care reviewed the compromised files to determine what information was leaked and which consumers were impacted. Innovative Renal Care recently completed this process, noting that the leaked information may include your name, address, date of birth, Social Security number, driver’s license number, financial account information, electronic signature, health insurance information, medical information, and prescription information.
However, on February 14, 2025, Innovative Renal Care sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Innovative Renal Care
Innovative Renal Care is a healthcare organization specializing in dialysis and kidney care services for patients with chronic kidney disease and end-stage renal disease. Headquartered in Nashville, Tennessee, the company provides comprehensive nephrology care, including in-center hemodialysis, home dialysis, and transplant support. The organization employs approximately 500 people and generates an estimated $100 million in annual revenue.
