ApolloMD Data Breach Lawsuit Investigation

Were you treated by an ApolloMD-affiliated practice or received a recent breach letter? A May 2025 cyber-attack may have leaked your most sensitive personal and medical details. Find out how to protect your identity and whether you can pursue compensation below.

What Happened?

On May 22, 2025, ApolloMD’s security team detected suspicious activity inside its information-technology environment. An immediate forensic investigation revealed that an unauthorized actor infiltrated company systems between May 22 and May 23, gaining access to files that contained both personal identifiable information (PII) and protected health information (PHI).

After confirming the intrusion, ApolloMD reviewed the compromised files to identify exactly what data and whose records were affected. Because the company services more than 125 medical practices nationwide, the impacted population spans multiple states and facilities, including:

• Pensacola Hospitalist Physicians, LLC (Florida)
• Broad River Physicians Group, LLC (South Carolina)
• Other ApolloMD-affiliated hospitals and physician groups

What Information Was Exposed?

The type of data varies by individual, but could include:

• Full name
• Social Security number
• Date of birth and home address
• Diagnosis and treatment details
• Provider names and dates of service
• Health-insurance policy information

When Were Victims Notified?

• July 21 – September 11, 2025 – ApolloMD informed its partner practices of the breach.
• September 15, 2025 – A public notice was posted on ApolloMD’s website.
• September 17, 2025 – Individual notification letters began mailing to patients and employees.

Your Rights & Next Steps

Federal and state laws give breach victims the right to:

• Receive free credit-monitoring and identity-theft protection services.
• Pursue monetary damages if negligence contributed to the breach.
• Obtain a copy of the internal investigation to understand exactly what was stolen.
• Place a fraud alert or security freeze on credit reports at no cost.

Download Official Breach Notice (PDF)

How to Protect Yourself Now

1. Enroll in the Free Monitoring Service offered by ApolloMD as soon as your letter arrives.
2. Request Your Credit Reports from Equifax, Experian and TransUnion and review them for unfamiliar activity.
3. Consider a Security Freeze to prevent new accounts from being opened in your name.
4. Monitor Medical Benefits Statements (EOBs) for treatments you didn’t receive.
5. Keep Documentation of all out-of-pocket costs or time spent addressing the breach; these may be reimbursable.

Potential Lawsuit Investigation

Cyber-security experts note that many healthcare data breaches occur when outdated security protocols, unpatched systems, or inadequate employee training leave networks vulnerable. If similar deficiencies are confirmed at ApolloMD, victims could be entitled to financial compensation for:

• Identity-theft losses and fraudulent charges
• Credit-monitoring and restoration expenses
• Lost time and wages spent mitigating the breach
• Emotional distress and loss of privacy

Our investigation is ongoing. If you received a notification letter—or believe your information was stored by an ApolloMD practice—complete our secure case review form to learn your legal options.

Frequently Asked Questions

How do I know if my data was part of the ApolloMD breach?

Individuals whose information was in the compromised files should receive a mailed letter. If you were treated by an ApolloMD-affiliated provider and have not received notice, contact the practice to confirm.

What is ApolloMD offering to victims?

ApolloMD is providing complimentary credit-monitoring and identity-theft protection along with a detailed list of compromised data elements.

Can I file a lawsuit against ApolloMD?

Possibly. If evidence shows ApolloMD failed to implement reasonable security safeguards, affected individuals may seek compensation through individual suits or a class action.

Will enrolling in credit monitoring waive my legal rights?

No. Accepting ApolloMD’s free monitoring does not limit your ability to pursue additional legal remedies.

What should I do if I spot fraudulent activity?

Immediately contact the affected creditor or medical provider, file a police report, and notify the Federal Trade Commission at IdentityTheft.gov.

How long will the ApolloMD data breach investigation take?

Security investigations can span weeks to months. Legal inquiries into potential negligence or violations typically proceed in parallel and may take longer.

Attorney Advertising. Prior results do not guarantee a similar outcome.