Arkansas Heart Hospital Data Breach Details
The breach was identified by a vendor on March 15, 2025, and was determined not to involve any systems owned or operated by the hospital itself. Instead, the incident affected vendor systems used during the hospital’s transition to a new electronic medical record system.
The unauthorized access occurred between January 22, 2025, and February 20, 2025. Based on the hospital’s investigation, individuals who received care at Arkansas Heart Hospital between January 1, 2022, and January 31, 2025, may be impacted.
In response to the breach, Arkansas Heart Hospital has been working with third-party specialists to investigate the incident. The hospital has also notified law enforcement and communicated with affected individuals. While the hospital is in the process of obtaining address information for potentially impacted individuals, it is preparing to send notifications via U.S. Mail.
Under U.S. law, individuals affected by data breach are entitled to one free credit report each year from the three major credit reporting bureaus—TransUnion, Experian, and Equifax.
Compromised Information
The compromised data may include personal details such as:
- Full name
- Address
- Phone number
- Email address
- Date of birth
- Social Security Number
- Treatment and diagnosis details
- Prescription information
- Provider name
- Medical record or case number
- Health insurance information
- Sex, ethnicity, language
- Maiden name, marital status
- Religious affiliation
- Death status
While the investigation is ongoing, there is currently no evidence to suggest that the compromised information has been misused.
