Back Classaction

Rocky Mountain Care Data Breach Reported; Attorneys Investigating

Classaction • March 31, 2026

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Rocky Mountain Care data breach.

As part of their investigation, they need to hear from individuals who had their information exposed in the incident , including those who received notice of the Rocky Mountain Care data breach or otherwise believe they are affected.

Rocky Mountain Care, a Utah-based healthcare system, has confirmed a cybersecurity breach involving unauthorized access to certain files.

The breach, previously discovered by dark web monitoring site Ransomware.Live on February 23, 2026 and linked to the threat actor Qilin, was confirmed in a March 27 notice posted to the company’s website .

According to the notice, the Rocky Mountain Care data breach occurred between January 30 and February 2, 2026. The company is determining whether any protected patient health information may have been compromised and plans to notify affected individuals directly once the review is complete.

Rocky Mountain Care, based in Utah, operates 10 assisted living facilities and provides healthcare, hospice, and outpatient services across Utah, Idaho, Wyoming, Missouri, and California.

If your information was exposed in the Rocky Mountain Care data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Rocky Mountain Care to ensure they take proper steps to protect the information they were entrusted with.

Affected by the Rocky Mountain Care data breach? Fill out the form on this page today.

If you believe your information was exposed in the Rocky Mountain Care data breach, fill out the form on this page to get in touch with us.

An attorney or legal representative may then reach out to you to explain more this investigation and ask you a few questions.

Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.

Published: March 31, 2026

The information submitted on this page will be forwarded to Bryson Harris Suciu & DeMay PLLC who has this investigation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Rocky Mountain Care Faces Data Breach from Qilin Ransomware Attack Rocky Mountain Care, a healthcare provider in Utah, reported a data breach following unauthorized access by the Qilin Ransomware group. The breach occurred between January 30 and February 2, 2026, and was publicly disclosed on March 27, 2026. The attackers threatened to publish the stolen data on February 23 if their ransom demands were not met. The extent of the compromised data, including whether Protected Health Information (PHI) was involved, is still under investigation. Rocky Mountain Care has engaged third-party cybersecurity specialists to assist with the investigation and has set up a dedicated assistance line for affected individuals. Attorneys are exploring the possibility of a class action lawsuit for those impacted by the breach. The company has not disclosed whether it paid the ransom. Individuals are advised to monitor their accounts for suspicious activity and utilize available consumer protections. 3 sources 52

Extracted Entities

Rocky Mountain Care Data Breach Reported; Attorneys Investigating

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Industries (1)