Secure Healthcare Information Management, LLC faces class-action scrutiny after a July 2026 data security incident exposed patient billing data. Multiple law firms are now investigating privacy claims on behalf of people who received breach notices. SHIM is a billing and medical-management firm serving independent physicians and institutions in northeastern Pennsylvania. According to Edelson Lechtzin LLP, the firm is probing class-action claims after patient data was exposed in the class-action investigation announcement.
Official resources:
- Explore the official data from Globenewswire — Use this primary source to review the underlying data.
- Explore the official data from Zlk — Use this primary source to review the underlying data.
Table of Contents
What happened?
SHIM detected a network disruption on July 17, 2026. It hired cybersecurity experts to secure systems and review what occurred. That review found an unknown actor accessed or acquired files during July 6-16, 2026. SHIM then examined the affected files to identify individuals and contact details.
SHIM completed that file review and confirmed the scope on Sept. 18, 2026. It began mailing individual notices on Oct. 6, 2026 and posted a website notice, as described in the SHIM notice republished by USA News Hour.
Who is affected?
The incident affects patients and others whose information SHIM held for billing. That includes people who never dealt with SHIM directly. It also includes possible patients of Medical Associates of the Lehigh Valley.
That medical practice itself is not alleged to have been breached. Law firms are asking notice recipients to come forward for case evaluation. Those outreach pages define the current lawsuit pool around mailed-notice recipients.
What information was involved?
The potentially affected data may include names, dates of birth, and Social Security numbers. It may also include driver's license or state ID numbers. Medical information and health insurance information are also at issue.
Those categories increase risk of medical identity theft and insurance fraud. According to Chimicles Schwartz Kriner & Donaldson-Smith LLP, the exposed combination centers on identity and health billing identifiers in the investigation summary. Social Security numbers and health IDs can support fraudulent care, claims, or tax filings.
What should notice recipients do now?
Keep the mailed letter in a safe place. It documents your connection to the incident and any deadlines for protective offers.
Use protective resources SHIM offered in the notice. Then watch for misuse across medical, insurance, credit, and tax accounts.
- Save the notice, envelope, and any enrollment codes
- Enroll in offered monitoring or protection services promptly
- Review explanation-of-benefits forms, billing statements, and credit reports
- Flag unfamiliar providers, claims, accounts, or tax notices immediately
You Might Also Like
- Why Two People Affected by the Same Data Breach May Face Different Risks
- Vendor Data Breach Investigation Guide: Evidence, Notices, and Verification
- Tech Company Data Breach News FAQ for October 2026: Source-Checked Answers to Common Questions