What is this about?

If you recently received a letter or an email from Compass Health Brands informing you that your sensitive personal and protected health information was compromised in a data breach involving its vendor, Cleo Communications, LLC ("Cleo"), you may be entitled to compensation. Compass Health Brands recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

Compass Health Brands recently became aware of a security incident involving a vulnerability in a third-party vendor’s secure file transfer software. The Cleo file transfer tool, which is used by numerous organizations, contained an unknown flaw that an unauthorized actor exploited in October 2024. As a result, the actor gained access to a limited portion of Compass Health Brands’ systems and obtained copies of sensitive files. The company is currently conducting an internal review to determine the full scope of the incident and identify affected individuals. While Compass Health Brands has not yet started sending formal notification letters, it is expected to do soon.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal and protected health information may have been compromised:

• Name,
• Email address,
• Date of birth,
• Social Security number,
• Lab results, and
• Health insurance policy information

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you have experienced a disruption in service from Compass Health Brands there is no cost or obligation to participate. Follow the link below to find out if you are eligible for compensation.