Methodist Homes of Alabama and Northwest Florida
Disclosed Jan 30, 20251 year ago25,579 affectedConfirmed
The covered entity (CE), Methodist Homes of Alabama and Northwest Florida, discovered that an unauthorized user had access to its systems between October 2-14, 2024, via a ransomware attack. The breach affected the protected health information (PHI) of 8,711 individuals. The PHI involved names, addresses, dates of birth, Social Security numbers, diagnoses, and other treatment information. The CE provided breach notification to the affected individuals, the media, the HHS Secretary, and posted substitute breach notice on its website. In response to the breach, the CE implemented a variety of additional security measures, additional training requirements, and a revised password management policy.
What is known
| People affected | 25,579 (as reported by the organization) |
|---|---|
| Disclosed | Jan 30, 2025 |
| Happened | May 21, 2025 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Healthcare · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| HHS OCR breach report: Methodist Homes of Alabama and Northwest Florida (Healthcare Provider, AL)ocrportal.hhs.gov · Official notice | Official notice |
| Indiana Attorney General 2026 data breach report: Methodist Homes of Alabama & Northwest Floridain.gov · Official notice | Official notice |
| Indiana Attorney General 2025 data breach report: Methodist Homes of Alabama & Northwest Floridain.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| HHS archivetotal | Jan 30, 2025 | 8,711 |
| Indiana AGresidents of IN | Oct 3, 2025 | 8 |
| Indiana AGresidents of IN | Jan 5 | 3 |
| HHS OCRtotal | Jan 6 | 1,406 |
History of this record
- 2026-09-25 · disclosed: 2025-10-03 to 2025-01-30 · backfill source
- 2026-09-25 · summary: empty to The covered entity (CE), Methodist Homes of Alabama and Northwest Florida, discovered that an unauthorized user had access to its systems between October 2-14, 2024, via a ransomware attack. The breach affected the protected health informat · backfill source
- 2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-Date-Report-2025.pdf · backfill source
- 2026-09-25 · records: 9167 to 25579 · backfill source
- 2026-09-25 · disclosed: 2026-01-05 to 2025-10-03 · backfill source
- 2026-09-25 · records_basis: hhs to organization · backfill source
- 2026-09-25 · records: 1406 to 9167 · backfill source
- 2026-09-25 · disclosed: 2026-01-06 to 2026-01-05 · backfill source
- 2026-09-25 · occurred: empty to 2025-05-21 · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (HHS OCR), confirmed by HHS OCR. Record counts are as reported. Not legal advice.
Everything about Methodist Homes of Alabama and Northwest Florida