Alabama Ophthalmology Associates Data Breach Lawsuit Investigation

Key Facts About the Breach

• Incident window: January 22 – January 30, 2025
• Discovery date: January 30, 2025
• Attack type: Ransomware by the BianLian group
• Individuals affected: 131,576 U.S. patients and employees
• Regulatory filings: HHS (April 8, 2025) and Vermont AG (April 11, 2025)
• Notification letters mailed: April 7, 2025
• Breach hotline: 1-877-280-2754

What Information Was Exposed?

The attackers allegedly accessed both personally identifiable information (PII) and protected health information (PHI), including:

• Full names & addresses
• Dates of birth & Social Security numbers
• Government-issued IDs
• Medical record numbers, diagnoses & treatment details
• Health-insurance information
• Financial and HR records
• Email correspondence and internal databases

The breadth of data raises the risk of identity theft, medical fraud, and financial crimes.

Timeline of Events

• Jan 22–30, 2025: BianLian infiltrates AOAPC’s network.
• Jan 30, 2025: Unusual network activity triggers an internal investigation.
• Early Feb 2025: Cyber-forensics team confirms data acquisition.
• Apr 7, 2025: AOAPC begins mailing notification letters to affected individuals.
• Apr 8 & 11, 2025: Breach reported to HHS and the Vermont Attorney General.

AOAPC’s Response

Alabama Ophthalmology Associates isolated affected systems, engaged digital forensics experts, and strengthened network security. A toll-free call center was launched, and detailed guidance was provided to help patients protect their identities.

Download Official Breach Notice (PDF)

Protecting Yourself After the Alabama Ophthalmology Associates Breach

Take these steps immediately:

• Review bank, credit-card, and insurance statements for suspicious activity.
• Request free credit reports and place a fraud alert or security freeze with Equifax, Experian, and TransUnion.
• Change passwords and enable multi-factor authentication on sensitive accounts.
• Report any signs of identity theft to the FTC at ftc.gov/idtheft.
• Keep copies of any fraudulent charges or correspondence—these may support a legal claim.

Your Legal Options

If you received a breach notice, you may be entitled to monetary damages for time spent, out-of-pocket losses, and the diminished value of your personal information. Class-action litigation can also push organizations to improve data security standards.

How to Start a Claim

1. Gather your breach letter and any evidence of fraud.
2. Document time lost resolving issues (e.g., contacting banks, credit bureaus).
3. Consult an experienced data-breach attorney about joining or starting a lawsuit.

Frequently Asked Questions

What happened in the Alabama Ophthalmology Associates data breach?

A ransomware group named BianLian accessed AOAPC’s network between January 22-30, 2025, stealing sensitive patient and business data.

What data was exposed in the Alabama Ophthalmology Associates breach?

Names, Social Security numbers, dates of birth, medical and insurance details, government IDs, and even financial or HR records were taken.

Is Alabama Ophthalmology Associates offering identity-theft protection?

The notification letter outlines free resources and instructions, but any complimentary credit monitoring has not been formally disclosed. Contact the hotline (1-877-280-2754) for specifics.

How do I file a claim after the Alabama Ophthalmology Associates data breach?

Preserve your breach notice, track any fraudulent activity, and speak with a qualified data-breach attorney. You may be able to join a class action seeking compensation.

Can I sue Alabama Ophthalmology Associates for the data breach?

Potentially, yes. Courts have allowed victims to pursue damages for data-breach-related losses. An attorney can assess the strength of your case based on the nature of your damages.