ERMI LLC Data Breach Exposes Patient Information in California

ERMI LLC, an entity specializing in rehabilitative medical devices, officially reported a data breach to regulatory bodies in California on May 26, 2026. The company, which maintains extensive records for patients receiving therapeutic equipment, indicated that its network infrastructure was compromised, leading to unauthorized access to confidential information.

The breach, which occurred on or about February 15, 2025, involved an unspecified type of security incident. Public filings confirm that ERMI LLC is currently monitoring the situation following the compromise of its systems. Organizations like ERMI LLC are often targets for cyberattacks due to the volume and sensitivity of the data they manage.

The exposed data categories include Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, Home Address, and Phone Number. The combination of these data types presents significant risks, potentially enabling identity theft or medical fraud.

Individuals who receive a breach notification from ERMI LLC should carefully review the information provided. It is generally recommended to remain vigilant by monitoring financial accounts and credit reports for any suspicious activity. Placing a fraud alert or security freeze on credit files can also provide an additional layer of protection. Consider enabling multi-factor authentication on online accounts whenever possible.