MPOWERHealth 2025 Data Breach
ObscureIQ Breach Intelligence
High SeverityWebsite / service breach
MPOWERHealth Musculoskeletal Care Services Breach (2025): Patient Medical, Insurance & SSN Records Exposed via WorldLeaks
Healthcare technology and musculoskeletal care management company.
Verified by ObscureIQ Intelligence
87/100Breach Risk Index
60Data Value
40Market Recency
286dSince Breach
Breach Intelligence Summary
Entity: MPOWERHealth · Actor: WorldLeaks · Sources: 2 references
Attack: Ransomware / Extortion
Profile: Company · Healthcare services and technology · Surgical and clinical services provider · USA
Timeline: Breach (2025-08-19) · Indexed (Sep 25, 2025) · Year (2025)
Exposure: 561K records · 8 fields: Date of Birth, Email Address, Full Name, Health Insurance, Medical Diagnosis, Phone Number, Physical Address, Social Security Number
Status: Confirmed
Executive Summary
MPOWERHealth, an Addison, Texas healthcare-services company in the value-based musculoskeletal care market, was listed by the WorldLeaks extortion group on August 19, 2025, which claimed roughly 1.5 TB of data (about 1.6 million files) including health insurance claims and explanations of benefits. Exposed data could include names, contact information, dates of birth, Social Security numbers, health insurance information, medical records, and billing/payment information. The total affected-individual count has not been officially released; a DataBreach.com record cites ~561,319 while early reporting estimated 55,000+ patients plus employees.
ObscureIQ assessment: High risk of identity theft, medical fraud, and provider-targeted phishing. Surgical and clinical context may also expose highly sensitive treatment relationships.
Breach Impact
The exposure combined identity and clinical data (Social Security numbers, dates of birth, health insurance, and medical records) tied to musculoskeletal and surgical care, creating identity-theft, insurance-fraud, and medical-fraud risk. Because MPOWERHealth coordinates care across a physician network, the breach implicates patients and providers across multiple relationships, and the surgical/MSK context supports credible treatment- and billing-themed scams.
About MPOWERHealth
MPOWERHealth is an Addison, Texas-based healthcare services and technology company serving the value-based musculoskeletal (MSK) care market, offering a physician network, intraoperative neuromonitoring and clinical services, and payment/administrative solutions. It holds patient, provider, and claims data across care-coordination and billing workflows.
Why They Hold Your Data
Healthcare services and surgical technology firms collect patient, provider, billing, scheduling, and clinical workflow data across care coordination and health technology operations.
Recent Developments
The WorldLeaks extortion group listed MPOWERHealth on its leak site on August 19, 2025, claiming roughly 1.5 TB (over 1.6 million files). MPOWERHealth confirmed a cyberattack involving protected health information; the total affected-individual count was not released (early estimates cited 55,000+ patients plus employees). Class-action investigations followed.
Data Points Exposed
8 verified field types
Date of Birth High
Email Address
Full Name High
Health Insurance
Medical Diagnosis Critical
Phone Number
Physical Address High
Social Security Number Critical
Field names are shown in full for clarity and search visibility. Canonical machine keys are emitted only in this page’s structured data.
Exploitation & Downstream Threats
Threat Activity:Critical
Primary downstream threats:
- Identity theft and synthetic identity construction using SSN and DOB
- Medical identity fraud and insurance abuse using medical records and insurance data
- Targeted phishing and vishing referencing musculoskeletal/surgical care or claims
- SIM swap attacks where phone numbers are present
- Doxxing and physical targeting from exposed home addresses
Threat vectors:
- Medical extortion, insurance fraud & discrimination
- Full identity theft & synthetic identity fraud
- Name-based social engineering
- SIM swapping, vishing & SMS phishing
- Physical stalking, mail fraud & identity verification
- Home targeting, stalking & physical threat
Threat Actor: WorldLeaks
WorldLeaks
Ransomware / Extortion
Attribution and method are based on available breach intelligence. Reported attack vector: Ransomware / Extortion.
Recommended Actions
If you believe your information may be included:
Protect Your ID Documents
Government-ID exposure enables document fraud — monitor and report misuse.
Enable MFA Everywhere
Turn on multi-factor authentication on email first, then financial accounts.
Report & Recover
If you spot misuse, start an official recovery plan and report fraud.
Frequently Asked Questions
What happened in the MPOWERHealth breach?▾
MPOWERHealth, an Addison, Texas healthcare-services company in the value-based musculoskeletal care market, was listed by the WorldLeaks extortion group on August 19, 2025, which claimed roughly 1.5 TB of data (about 1.6 million files) including health insurance claims and explanations of benefits.…
What data was exposed?▾
Verified fields include Date of Birth, Email Address, Full Name, Health Insurance, Medical Diagnosis, Phone Number, Physical Address, Social Security Number.
What should I do if I was affected?▾
Change reused passwords, enable MFA, and (if identity or financial data is involved) freeze your credit and monitor your accounts.
Sources & References
Every claim on this page is traceable. This breach draws on:
Breach Index
ObscureIQ Intelligence
ObscureIQ proprietary analysis
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation