VIVA Health leaks data of nearly 5,000 Alabama members
Learn More
VIVA Health, an Alabama-based health insurance provider serving employees of UAB and Alabama Power, is reporting a data leak that affected 4,945 of its members.
The company discovered on August 27, 2025, that a file containing protected health information had been inadvertently made publicly accessible on its website since June 14, 2025. Exposed data includes:
- Medicare Beneficiary Identifier (MBI) numbers
- County of residence information
- VIVA Health Member identification numbers
- Group numbers
- Authorization numbers for requests between August and September 2024
- General details about prior authorization requests, including request and decision dates, approval status, and category descriptions such as skilled nursing facility or diagnostic lab services
The company initiated an investigation and reported the incident to state and federal regulators in accordance with applicable healthcare privacy laws.
VIVA Health is offering one year of free credit monitoring to all affected individuals, with an enrollment deadline of September 30, 2026. The company has mailed notification letters to all 4,945 affected members detailing the incident and providing guidance on protective steps they can take.
