Covenant Health, Inc.

Covenant Health, Inc., also known as Covenant HealthCare and Covenant Health, is a healthcare organization headquartered in the United States of America. It provides medical services to patients through facilities that include hospitals and related care settings. The organization handles a broad range of patient information, such as names, dates of birth, medical record numbers, Social Security numbers, health insurance details and treatment data. Its core mission centers on delivering clinical care and managing the associated health records for the populations it serves.

The scale of Covenant Health’s operations is reflected in the size of the patient populations affected by its reported security incidents. In May 2025, a breach disclosed that up to 478,188 individuals had their personal and health information accessed, indicating a substantial patient base. An earlier incident in May 2021 involved approximately 45,000 individuals whose data was compromised through unauthorized email account access. These figures demonstrate that the organization manages a considerable volume of protected health information on an ongoing basis.

As a healthcare provider operating in the United States, Covenant Health is subject to federal privacy regulations that govern the protection of health information, notably the Health Insurance Portability and Accountability Act (HIPAA). The organization has experienced notable cybersecurity events, including a ransomware attack claimed by the Qilin group in 2025 and an email‑based intrusion in 2021. These incidents highlight the organization’s exposure to evolving threat actors targeting healthcare data. Consequently, Covenant Health’s responsibilities extend beyond clinical care to include safeguarding sensitive information against unauthorized access.