Alvaria
Disclosed Feb 22, 20233 years ago51,858 affectedConfirmed
Alvaria, the business associate (BA), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 4,456 individuals. The PHI involved included names, phone numbers, addresses, birthdates, and treatment information. Following the breach, Alvaria implemented additional administrative and technical safeguards and provided complimentary credit monitoring services to affected individuals.
What is known
| People affected | 51,858 (as reported by the organization) |
|---|---|
| Disclosed | Feb 22, 2023 |
| Happened | May 9, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| Indiana Attorney General 2023 data breach report: Alvariain.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Alvaria (Business Associate, MA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| Indiana AGresidents of IN | Feb 22, 2023 | 26 |
| Indiana AGresidents of IN | May 23, 2023 | 1,363 |
| HHS archivetotal | May 26, 2023 | 4,456 |
History of this record
- 2026-09-25 · sector: other to health · backfill source
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · summary: empty to Alvaria, the business associate (BA), reported that it experienced a ransomware attack that compromised the protected health information (PHI) of 4,456 individuals. The PHI involved included names, phone numbers, addresses, birthdates, and · backfill source
- 2026-09-25 · disclosed: 2023-05-23 to 2023-02-22 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Indiana AG), confirmed by Indiana AG. Record counts are as reported. Not legal advice.