Ardent Health Services Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating Ardent Health Services regarding its recent data breach. While much information is still unknown about the breach, Ardent Health reported that it suffered a ransomware attack on November 23, 2023.


Ardent Health is a private healthcare company based in Tennessee. Through its subsidiaries, Ardent Health provides healthcare services to patients in Oklahoma, New Mexico, Texas, Idaho, Kansas, and New Jersey. Originally founded in 1993 as Behavioral Healthcare Corporation, Ardent Health has grown to own and operate 30 hospitals and over 200 care sites. Since 2001, Ardent Health has invested more than $1.4 billion in newly constructed facilities, technology, and services for its hospitals and clinics.2 Headquartered in Nashville, Tennessee, Ardent Health employs over 23,000 individuals, including over 1,400 providers and 6,800 nurses.


On November 23, 2023, Ardent Health was alerted to a ransomware attack impacting its systems. While much information is still unknown about the breach, on November 27, 2023, Ardent Health posted a notice about the cybersecurity incident on its website. The notice details that, in response to the ransomware attack, Ardent Health took its network offline, which includes all access to IT applications, corporate servers, Epic (MyChart) software, internet, and clinical programs.1 Additionally, numerous news reports indicate that Ardent Health has been forced to divert emergency patients to other hospitals. At this time, Ardent Health has not confirmed whether the sensitive personal information belonging to its patients or employees has been impacted.

If you are a current or former patient or employee of Ardent Health Services:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or

If you were impacted by the Ardent Health data breach, you may consider taking the following steps to protect your personal information.

  1. Change passwords and security questions for online accounts;
  2. Regularly review account statements for signs of fraud or unauthorized activity;
  3. Monitor credit reports for signs of identity theft; and
  4. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: