Montana's Swift Institute Data Breach Exposes Patient Records

James J. Lynch MD Ltd., operating as Swift Institute in Montana, reported a data security incident on December 12, 2025. This breach, which occurred on January 30, 2025, led to the exposure of various sensitive patient data types. Individuals affected should carefully monitor their personal information for potential misuse.

State: Montana
Breach date: January 30, 2025
Reported: December 12, 2025

What may have been exposed

Full Name
Date of Birth
Social Security Number
Medical Record Number
Health Insurance ID Number
Diagnosis and Treatment Information
Prescription Information
Provider and Treatment Dates
Mailing Address

James J. Lynch MD Ltd., doing business as Swift Institute, a specialized medical practice in Montana, disclosed a data breach. The incident was reported on December 12, 2025, and is understood to have taken place on January 30, 2025. The nature of the breach remains unspecified at this time, but the company indicates that patient information was compromised. The investigation into this event is currently ongoing as authorities and Swift Institute monitor the situation.

The exposed data includes a range of sensitive personal and health identifiers. Information potentially affected consists of Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Mailing Address. The specific combination of these data types poses significant risks to those whose records were accessed.

Exposure of this kind of information can lead to various forms of identity theft and fraud. For example, Medical Record Numbers or Health Insurance ID Numbers could be used to obtain medical services in a victim's name, potentially corrupting their health history with inaccurate data. The combination of Full Name, Date of Birth, and Social Security Number further opens the door to financial fraud, such as opening new credit lines or filing fraudulent tax returns.

Individuals who receive notification regarding this breach are advised to take protective measures. This includes reviewing explanations of benefits from their health insurers for any unfamiliar services and checking their credit reports regularly for unauthorized activity. Monitoring bank statements and other financial accounts for suspicious transactions is also recommended. Placing a fraud alert or security freeze on credit files can further help prevent unauthorized access to personal financial accounts.

This information is based on public filings and official notifications regarding the data security incident at James J. Lynch MD Ltd. dba Swift Institute.

What to do if you were affected

Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Check for medical identity theft
Review the Explanation of Benefits statements from your health insurer for services or claims you never received, which can signal misuse of your medical identity.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Source: Montana Attorney General filing

Related data breach cases

Browse all Montana data breaches View the full case directory