ALN Medical Management alnmm.com ALN Medical Management data breach: what happened and what to do
ALN Medical Management, a Nebraska billing firm for medical providers, says someone accessed or took files in its hosted environment between March 18 and 24, 2024. Reports list names, Social Security numbers, ID numbers, financial, medical and health insurance information.
View all 13,115 breaches- Breach date
- 18 Mar 2024
- Made public
- 21 Mar 2025
- Data exposed
- Names, Social security numbers, Driver's licenses, Government issued IDs, Financial information, Medical information, Health insurance information
- Last updated
What happened
ALN Medical Management is a Nebraska revenue cycle and billing company that works for medical practices. According to its notice, an unauthorized actor accessed or took certain files and folders in a third-party hosted environment between March 18 and March 24, 2024.
Because ALN works for other providers, many people affected never dealt with ALN directly. Their notices came through, or named, their doctor or clinic. The first federal report in May 2024 listed 501 people, a placeholder. Later filings raised the number, and trade press reported figures well above that, so reports of the total differ.
What was exposed
Breach reports filed with state regulators list names, Social Security numbers, driver's license numbers, government ID numbers such as passports or state IDs, financial account and card numbers, medical information and health insurance information. What applies to you depends on your letter.
That mix covers most of what identity thieves want: enough to open credit, file false tax returns or bill insurers in your name. Medical billing files also tell a scammer who your doctor is and what you were treated for, which makes a phone call posing as your provider easy to believe.
What followed
ALN has faced a number of proposed class action lawsuits over the breach. These are allegations. No settlement is confirmed.
What to do if you were in it
- 1
Freeze your credit at all three bureaus
A freeze stops lenders from opening new accounts in your name. It's free and you can lift it when you need credit. Do it at Equifax, Experian and TransUnion, since each bureau keeps its own file.
- 2
Read your notice for what was involved
Your letter says which items of yours were in the files and whether free credit monitoring is offered. Enroll if it is.
- 3
Check insurance statements
Look for claims for care you didn't get. Report them to your insurer.
- 4
Treat calls about bills or care with suspicion
Hang up and call the provider using a number you look up yourself.
- 5
Watch your bank and card accounts
If account or card numbers were involved, ask your bank to issue new ones and review recent charges.
- 6
Check whether your email or phone is in this and other breaches
Run a free scan at serus.ai. Serus monitors breach databases and the dark web and alerts you when your info shows up. It can't remove data that has already leaked, so the steps here still matter.
Frequently asked
Was I affected by the ALN Medical Management breach?
If you got a notice from ALN or from your doctor or clinic about it, yes. ALN handled billing for many providers, so the notice may come from them.
What was exposed?
Names, Social Security numbers, driver's license and other government ID numbers, financial information, medical information and health insurance information, depending on the person.
Is there a settlement?
No settlement is confirmed. Several proposed class actions have been filed.
Should I freeze my credit?
Yes if your Social Security number was involved. It's free at all three bureaus.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
