• March 2026 •

University of Pittsburgh Medical Center (UPMC) Data Breach

Last Updated on March 19, 2026

If your data may have been compromised in the potential UPMC data breach, you may be able to start a class action to collect money for the harm you’ve suffered.

• Keep reading for more information

At A Glance

What's Going On?: Attorneys need to hear from people who may have been affected by the possible UPMC data breach as they investigate whether a class action lawsuit can be filed.
What You Can Do: If you believe your information may have been compromised in the reported UPMC data breach, fill out the form on this page to learn more about the investigation and how you can help.
Does This Cost Anything?: It costs nothing to get in touch or to talk to someone about your rights.
What Can I Get?: If filed and successful, a class action lawsuit could provide consumers with money for any harm resulting from the UPMC breach.

UPMC Data Breach?: Lawsuit Investigation

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the reported UPMC data breach.

As part of their investigation, they need to hear from individuals who may have had their information exposed in the potential incident, including those who received notice of the possible UPMC data breach or otherwise believe they are affected.

UPMC Security Incident: What Happened?

The University of Pittsburgh Medical Center (UPMC) has announced a potential data breach that may have exposed confidential patient records.

A notice posted to UPMC’s website states that on January 13, 2026, UPMC was alerted by Epic Systems, its electronic medical records vendor, that Health Gorilla, a Health Information Exchange (HIE) partner, improperly accessed medical records.

The incident reportedly involved unauthorized electronic requests for information, allegedly for treatment purposes for shared UPMC patients. As a result, UPMC has issued written notices to possibly affected individuals.

Data compromised in the reported UPMC data breach may include demographic details such as names and birthdates, along with clinical notes, visit reasons, diagnoses, medical histories, and related orders or tests.

Epic Systems has filed a lawsuit against Health Gorilla for unauthorized access to its electronic records affecting patients in multiple healthcare systems, including UPMC's and Trinity Health's. Health Gorilla has denied wrongdoing.

UPMC operates over 40 hospitals and 800 outpatient sites across Pennsylvania, New York, Maryland, and internationally.

What You Can Do After the Reported UPMC Data Breach

If your information may have been exposed in the possible UPMC data breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force UPMC to ensure they take proper steps to protect the information they were entrusted with.

Affected by the possible UPMC data breach? Fill out the form on this page today.

Impacted Data:

• Date of Birth

• Diagnosis

• Name

• Medical History

• Clinical Notes

• Reason for Visit

• Medical Orders or Testing