Was I affected by the The Cooper Health System data breach?
This page summarises what has been publicly reported about this data breach involving The Cooper Health System. It does not tell you personally whether you were affected — check for an official notification, below, for that.
What is known
What happened, in order
- May 23, 2025Reported to regulator
If you may have been affected
Look for an official notification
- Check the email address and postal address you had on file with this organisation around the disclosure date — genuine notifications are usually sent by post or from the organisation’s own domain, not from a third party.
- Do not click links or call phone numbers inside an unexpected message about this incident; go directly to the organisation’s own website or a contact number you already trust instead.
- Keep any notification letter or email — you may need it later as proof if you have to dispute fraudulent activity.
Consider a credit freeze or fraud alert
- A credit freeze restricts access to your credit file, making it harder for someone to open new credit in your name. Contact all three US credit bureaus — Equifax, Experian and TransUnion — to place one; each must be contacted separately.
- A fraud alert is a lighter-touch alternative that asks lenders to verify your identity before extending credit. It lasts one year and can be renewed.
- Freezes and fraud alerts are free, and a freeze can be lifted or thawed temporarily whenever you need to apply for credit.
Change passwords and enable passkeys
- Change the password for any account you used with this organisation, and for any other account where you reused the same password.
- Use a unique, randomly generated password for each account — a password manager makes this practical.
- Where available, switch to a passkey or turn on multi-factor authentication, preferring an authenticator app over SMS.
Watch for follow-up phishing
- Breach disclosures are often followed by phishing emails, texts or calls impersonating the affected organisation or your bank. Be cautious of any message that creates urgency or asks you to confirm personal details.
- Verify unexpected contact by calling the organisation using a number from its official website, never one supplied in the message itself.
Monitor your accounts and statements
- Review your bank and card statements regularly for transactions you do not recognise.
- Consider setting up transaction alerts with your bank so you are notified of new activity as it happens.
- If you notice unfamiliar accounts or hard inquiries on your credit report, dispute them with the relevant credit bureau or lender.
This is general guidance, not legal advice.