Doctor Alliance doctoralliance.com Doctor Alliance data breach: what happened and what to do
Between October 31 and November 17, 2025, an unauthorized party used obtained credentials to access files on Doctor Alliance's web portal. HHS lists 17,000 people. Notices describe names, dates of birth, diagnoses and treatment details.
View all 13,115 breaches- Breach date
- 31 Oct 2025
- Made public
- 16 Nov 2025
- Affected
- 17,000
- Data exposed
- Names, Physical addresses, Dates of birth, Medicare numbers, Medical information, Treatment information
- Last updated
Doctor Alliance is a company that works with home health and hospice providers on patient paperwork. In late 2025 it reported that an unauthorized party had gained access to the protected health information of 17,000 people, according to the U.S. Department of Health and Human Services (HHS) breach portal.
What happened
Notices sent by providers on Doctor Alliance's behalf say an unauthorized party obtained credentials and used them to access certain files on Doctor Alliance's web portal between October 31 and November 17, 2025. Doctor Alliance is a business associate, meaning a vendor that handles patient information for health care providers. That's why many people heard about it from their own home health agency, not from Doctor Alliance.
Providers including Community Nurse, Path of Care Home Health and Hospice and Team Select Holdings sent their own notices. A threat actor has claimed to have taken a far larger volume of files, but that claim is unverified, and HHS's count of 17,000 is the official figure.
What was exposed
The information varies by provider and by person. Community Nurse's notice lists name, address, date of birth, Medicare number, start of care date, diagnosis, medications and treatment orders. Path of Care's notice lists names, addresses, dates of birth, medical record numbers, and diagnosis and treatment information. HHS describes the data as clinical and demographic information.
A Medicare number together with a name and date of birth lets someone bill Medicare in your name. Medication and diagnosis details help scammers write calls or letters that sound like they come from your care team.
What to do now
If your home health or hospice provider sent you a letter, it names what applies to you. Look for the credit monitoring offer and the phone number to call. Don't use links in unexpected emails or texts about the breach.
What to do if you were in it
- 1
Check your Medicare statements
Read every Medicare Summary Notice for services you didn't get. Report anything odd to 1-800-MEDICARE. If your Medicare number was exposed, ask about getting a new card.
- 2
Expect scams that mention your care
A caller who knows your diagnosis or medications isn't necessarily your pharmacy or doctor. Hang up and call the number you already have for them.
- 3
Freeze your credit at all three bureaus
A freeze stops anyone from opening new credit in your name. It's free and takes about 10 minutes each at Equifax, Experian and TransUnion. You can lift it temporarily when you apply for credit yourself.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan to see which breaches include your email address or phone number. Serus monitors breach databases and the dark web and alerts you when your data turns up, but it can't remove data that's already in a breach, so the alerts tell you what to change.
Frequently asked
Was I affected by the Doctor Alliance breach?
HHS lists 17,000 people. Your home health or hospice provider should have sent you a notice if you were included.
What was exposed?
It varies by provider: names, addresses, dates of birth, Medicare numbers, medical record numbers, diagnoses, medications and treatment information appear in the notices.
Is there a settlement?
The sources for this page don't mention one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
