Alabama Ophthalmology Associates Data Breach Details
On January 30, 2025, AOA became aware of unusual activity within its network environment, prompting an immediate response to secure its systems. The company engaged a leading, independent digital forensics and incident response firm to investigate the potential breach and assess whether any sensitive data had been affected. The investigation revealed that between January 22 and January 30, 2025, an unknown actor accessed and acquired personal and protected health information without authorization.
The affected data may include individuals’ names, dates of birth, Social Security numbers, health insurance information, treatment information, medical record numbers, and medical history. However, not all data elements were impacted for every individual. AOA has thoroughly reviewed the affected data to identify the individuals and specific information involved. This review was completed on March 19, 2025.
In response to the breach, AOA began notifying the impacted individuals on April 7, 2025, and provided details about the incident, including instructions on how to protect their personal information. A toll-free call center has been set up for affected individuals to ask questions and receive guidance.
What Information Was Compromised?
The compromised data may include:
- Full names
- Social Security numbers
- Addresses
- Dates of birth
- Health insurance information
- Treatment information
- Medical record numbers, and medical history
