Catalyst RCM Data Breach Class Action Investigation

Patient information held by Catalyst RCM may have been exposed in a data security incident affecting the company's billing and revenue cycle operations. Names, account numbers, and protected health information are believed to have been accessed by an unauthorized party. Affected patients are being notified by Catalyst RCM through written letters. If you received a data breach notification letter from Catalyst RCM, our data breach lawyers want to hear from you.

What Happened?

On or around November 8, 2025, suspicious activity was identified within systems used by Catalyst RCM to process medical claims, billing data, and related patient records. A forensic investigation was conducted, and it was determined that personal information had been viewed or copied by an unauthorized actor. The data involved is reported to include full names, account numbers, and protected health information tied to insurance claims and treatment billing. Affected patients were notified by Catalyst RCM through written letters mailed to the most recent addresses on file. A public summary of the incident was also referenced in healthcare industry breach reports. Recipients are being urged by Catalyst RCM to monitor financial accounts and remain alert to suspicious activity tied to their identity.

If you are a patient who received care from Catalyst RCM, you may be entitled to compensation. Fill out the form below to see if you qualify.

Steps To Take If You Were Affected

1. Monitor your credit reports and financial accounts for suspicious activity
2. Consider placing a fraud alert or credit freeze with all three major credit bureaus
3. Be alert to phishing emails or calls referencing the breach
4. Change passwords on any affected accounts and enable two-factor authentication
5. Keep a copy of your data breach notification letter for your records