Alabama Cardiovascular Group
Disclosed Aug 2, 20242 years ago280,534 affectedConfirmed
The covered entity (CE), Alabama Cardiovascular Group, reported that it experienced a hacking incident that affected the protected health information (PHI) 280,534 individuals. The PHI involved included demographic, clinical, and financial information. The CE notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the CE provided complimentary credit monitoring services to the affected individuals, implemented additional administrative, technical, and security safeguards, and retrained workforce members to better protect its PHI.
What is known
| People affected | 280,534 (as reported by the organization) |
|---|---|
| Disclosed | Aug 2, 2024 |
| Happened | Jun 6, 2024 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2024 data breach report: Alabama Cardiovascular Groupin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Alabama Cardiovascular Group (Healthcare Provider, AL)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Aug 2, 2024 | 95 |
| HHS archivetotal | Aug 2, 2024 | 280,534 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Alabama Cardiovascular Group, reported that it experienced a hacking incident that affected the protected health information (PHI) 280,534 individuals. The PHI involved included demographic, clinical, and financial · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.