Norton Healthcare Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Norton Healthcare, Inc. regarding its recent data breach. The Norton Healthcare data breach involved sensitive personal information and protected health information belonging to 2,500,000 individuals.


Norton Healthcare is a not-for-profit healthcare system serving patients throughout Kentucky and Southern Indiana. To that end, Norton Healthcare provides a variety of patient care services and treatments, including cancer care, general surgery, heart and vascular care, women’s health services, and more. Founded in 1886, Norton Healthcares healthcare system includes 430 locations and 14 outpatient centers, 17 Norton Immediate Care Centers, nine Norton Prompt Care clinics and an expanded telehealth program3. As Louisville’s second largest employer, Norton Healthcare has over 1,750 employed medical providers and more than 3,000 total providers on its medical staff. Headquartered in Louisville, Kentucky, Norton Healthcare employs over 20,000 individuals.


On May 9, 2023, Norton Healthcare discovered that it had experienced a data breach in which sensitive personal identifiable information and protected health information in its systems may have been accessed. Through its investigation, Norton Healthcare determined that an unauthorized individual gained access to certain network storages devices between May 7, 2023, and May 9, 2023. On December 8, 2023, Norton Healthcare began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Contact information
  • Date of birth
  • Health information
  • Health insurance information
  • Medical identification number
  • Driver’s license or other government ID number
  • Financial account number
  • Digital signature

If you received a breach notification letter from Norton Healthcare, Inc.:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Norton Healthcare data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by Norton Healthcare, Inc.;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: