Skip to content
Ermi Data Breach Exposes SSNs, Medical Info

Ermi Data Breach Exposes SSNs, Medical Info

Classaction May 28, 2026

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Ermi data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident , including those who received notice of the Ermi data breach or otherwise believe they are affected.

Ermi, a medical device company that works with healthcare providers to treat patients with motion loss, has reported a data breach involving unauthorized access to employee email accounts.

A sample notification letter (pictured below) states that Ermi learned of the unauthorized activity on or around July 25, 2025. A subsequent investigation concluded that the Ermi data breach occurred between approximately February 15 and August 14, 2025. By April 17, 2026, a review of the potentially compromised data identified that some files containing personal information may have been compromised.

In a report submitted to the Texas Attorney General's Office , Ermi revealed that names; Social Security numbers; driver's license numbers; financial, medical, and health insurance information; and dates of birth may have been exposed.

If your information was exposed in the Ermi data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Ermi to ensure they take proper steps to protect the information they were entrusted with.

Affected by the Ermi data breach? Fill out the form on this page today.

If you believe your information was exposed in the Ermi data breach, fill out the form on this page to get in touch with us.

An attorney or legal representative may then reach out to you to explain more this investigation and ask you a few questions.

Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.

Published: May 28, 2026

The information submitted on this page will be forwarded to Bryson Harris Suciu & DeMay PLLC who has this investigation.

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Industries (1)