Vail Health Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Vail Health Services regarding its recent data breach. The Vail Health data breach involved sensitive personal identifiable information and protected health information belonging to more than 17,000 individuals.


Vail Health is a nonprofit community healthcare system operating a hospital and health clinics around Eagle County and Summit County, Colorado. With the establishment of Vail Ski Resort in 1962, medical services were needed to cope with Vail’s new-found popularity among skiers and outdoor enthusiasts. As a result, Vail Health was founded in 1965, operating out of a clinic with a single doctor. Over the years, Vail Health quickly expanded, building a hospital in 1967 and various clinics in the years since. Today, Vail Health offers services ranging from emergency care to cancer treatment and routine check-ups. Headquartered in Vail, Colorado, Vail Health employs more than 1,000 individuals.


Recently, Vail Health discovered that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed. Through its investigation, Vail Health determined that an unauthorized actor may have accessed this sensitive information between mid-January and mid-February 2022 by launching a phishing attack against employee email accounts. On September 12, 2022, Vail Health began notifying individuals whose information may have been impacted. The type of information exposed includes:

  • Name
  • Social Security number
  • Driver’s license number
  • Date of birth
  • Address
  • Health insurance information
  • Medical information (e.g., diagnosis or treatment information)

If you received a breach notification letter from Vail Health Services:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Vail Health data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in the free credit monitoring service provided by Vail Health Services;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: