Lorain Emergency Physicians report third party breach through the ransomware attack on ApolloMD
Learn More
Lorain Emergency Physicians, LLC, a healthcare organization based in Lorain, Ohio, is reporting a data breach caused by an incident affecting ApolloMD Business Services, a Georgia-based administrative services provider.
The breach was caused by a ransomware attack claimed by the Qilin cybercriminal group. ApolloMD discovered the incident on May 22, 2025, launched an investigation and notified law enforcement.
The exposed personal and protected health information included:
- Patient names
- Dates of birth
- Social Security numbers
- Home addresses
- Diagnosis information
- Provider names
- Dates of service
- Treatment information
- Health insurance information
The number of affected individuals has not been disclosed. According to the Qilin ransomware group, the attack resulted in the theft of 238GB of data.
ApolloMD began notifying affected physician practices between July 21 and September 11, 2025, and notification letters were mailed to impacted individuals on September 17, 2025.
The company is offering free credit monitoring services to patients whose Social Security numbers were exposed in the breach. ApolloMD has also established an incident response line at 833-397-6797, available Monday through Friday between 8 a.m. and 8 p.m. Eastern Time.
