Breachesby GlyphALN Medical Management
Disclosed May 23, 20241,323,720 affectedConfirmed
The business associate (BA), ALN Medical Management, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 1,323,720 individuals. The PHI involved included demographic, financial, and clinical information. The BA notified HHS, affected individuals, the media, and provided substitute notice. In its mitigation efforts, the BA implemented new technical safeguards and revised its policies and procedures.
What is known
| People affected | 1,323,720 (as reported to HHS) |
|---|---|
| Disclosed | May 23, 2024 |
| Discovered | Mar 24, 2024 |
| Happened | Mar 18, 2024 |
| Attack | Ransomware |
| Data exposed | NamesHealth |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
California Attorney General breach notice: ALN Medical ManagementWashington Attorney General breach notice: ALN Medical ManagementVermont Attorney General: 2025-03-21 ALN Medical Management Data Breach Notice to ConsumersHHS OCR breach report (archive, resolved): ALN Medical Management (Business Associate, NE)
Notices filed
History of this record
[] to ["names","health"]by backfillSource
empty to hhsby backfillSource
empty to 1323720by backfillSource
2025-03-21 to 2024-05-23by backfillSource
empty to The business associate (BA), ALN Medical Management, reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 1,323,720 individuals. The PHI involved included demographic, financial, and clby backfillSource
empty to https://ago.vermont.gov/document/2025-03-21-aln-medical-management-data-breach-notice-consumersby backfillSource
unknown to ransomwareby backfillSource
empty to 2024-03-24by backfillSource
2025-05-23 to 2025-03-21by backfillSource
First recordedby backfillSource
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.