ALN Medical Management (Health Prime International) reports data breach
Learn More
On May 23, 2024, ALN Medical Management, LLC, now integrated into Health Prime International, reports a data breach that involved unauthorized access to confidential information entrusted to the company.
The breach is described as a “Hacking / IT incident” involving a “network server,”. It's unclear whether the compromised data resided on ALN Medical Management’s network or if it was part of a third-party breach affecting one of their vendors.
The specific details of the compromised information have not been fully disclosed. However, ALN Medical Management has confirmed that the breached files contained sensitive data.
No details are disclosed about the number of affected individuals, data exposed or the nature of the attack.
Following their investigation, ALN Medical Management notified the affected individuals and provided resources for protecting against identity theft and fraud.
Update - as of March 21, 2025, ALN Medical Management reports that the incident was caused by a breach at a third-party hosting service. This incident has exposed sensitive patient information from multiple healthcare providers across the United States.
The attackers successfully breached the third-party hosted environment between March 18, 2024, and March 24, 2024. This compromised environment contained confidential files and folders belonging to patients of several ALN healthcare clients.
The sensitive information exposed in this breach varies by individual, but may include:
- Names
- Social Security numbers
- Financial account information
The healthcare providers impacted by this data breach include:
- National Spine and Pain in Frederick, Maryland
- Inpatient Physician Associates, LLC in Lincoln, Nebraska
- Hoag Clinic in Costa Mesa, California
- Allied Physicians Group in Melville, New York
The number of affected individuals has not been disclosed.
ALN Medical Management completed the review of the compromised files on January 31, 2025 and began sending data breach notification letters to all affected individuals on March 21, 2025.
