Notice of Horizon Healthcare RCM Data Security Incident
On November 26, 2025, Horizon Healthcare RCM (“Horizon”) mailed notification letters to certain Guthrie Lourdes Hospital patients whose personal information was involved in the Horizon incident. Guthrie is a former customer of Horizon. This notice is limited to an incident that occurred on Horizon’s systems. This incident did not involve or otherwise impact Guthrie Lourdes Hospital’s systems.
On December 27, 2024, Horizon learned that a computer virus was used to lock access to some files stored on its computer network. During their investigation of this matter, Horizon identified that files on certain systems were likely copied without permission between December 26 and 27, 2024. Horizon undertook an intensive review of those files, which concluded, with respect to some patient information, on September 23, 2025. At the end of September 2025, Horizon sought permission from Guthrie Lourdes Hospital to notify patients on its behalf and thereafter worked with Guthrie to obtain updated address information. Guthrie Lourdes Hospital’s review of this matter was completed on October 7, 2025.
The files contained patients’ names and one or more of the following types of information: addresses, other contact information, dates of birth, health insurance claim(s) processing information, Medicaid identification numbers, driver's license numbers, Social Security numbers, financial account information, payment card information, internal Horizon numbers, patient account numbers, and client account numbers. Please note, however, that Horizon has no indication of any individuals experiencing identity theft as a result of this incident.
While the incident did not impact Guthrie Lourdes Hospital’s own network, we are notifying you of this incident and sharing the steps that we are taking in response. We remain committed to upholding high standards of custodianship of information held by our third-party vendors and Horizon is no longer a vendor used by Guthrie Lourdes Hospital. It is always a good idea for patients to review statements they receive from their healthcare provider or health insurer. If they identify charges for services they did not receive, they should contact the healthcare provider or health insurer immediately. Additionally, Horizon is offering complimentary identity monitoring services to patients whose Social Security numbers or driver’s license numbers may have been involved.
Horizon has also established a dedicated, toll-free call center to help answer questions about the incident. The call center can be reached at 1-866-461-8271, Monday through Friday from 9:00 a.m. to 6:30 p.m. Eastern (excluding U.S. holidays).