ApolloMD Data Breach Lawsuit Investigation
Were you treated by an ApolloMD-affiliated provider? A ransomware attack has leaked 238GB of highly sensitive patient data—including Social Security numbers—onto the dark web. Find out how to protect yourself and learn whether you can file a claim today.
What Happened?
Between May 22 and May 23, 2025, ApolloMD Business Services, LLC detected unusual activity within its network. A forensic investigation confirmed that the Qilin ransomware group infiltrated company systems, siphoning approximately 238 gigabytes of data. The attackers later advertised the stolen files on a dark-web forum on June 12, 2025.
After containing the intrusion, ApolloMD engaged third-party cybersecurity specialists and alerted federal law-enforcement authorities. On September 17, 2025, the company began mailing notification letters to current and former patients whose information was involved.
What Information Was Exposed?
The compromised files contained a mix of personally identifiable information (PII) and protected health information (PHI):
- Full names
- Social Security numbers (for some individuals)
- Dates of birth
- Home addresses
- Government-issued IDs
- Diagnosis & treatment details
- Provider names and dates of service
- Health-insurance information
- Financial information
Who Is Affected?
The breach impacts patients treated by numerous ApolloMD-affiliated physician groups across the United States, including:
- Passaic Hospitalist Services LLC
- Pensacola Hospitalist Physicians LLC
- Broad River Physicians Group LLC
- Olive Branch Emergency Physicians LLC
- Aurora Emergency Physicians LLC
- Passaic River Physicians LLC
- The Bortolazzo Group LLC
- Methodist University Emergency Physicians PLLC
- Trinity Emergency Physicians LLC
- Lorain Emergency Physicians LLC
- Pennsylvania Hospitalist Group LLC
Your Immediate Action Plan
- Review medical and insurance statements. Report any unfamiliar charges or services right away.
- Enroll in free credit monitoring. ApolloMD is offering complimentary services to anyone whose Social Security number was exposed.
- Place fraud alerts or credit freezes. This adds an extra layer of security to your financial accounts.
- Monitor explanation-of-benefits (EOB) forms. Unexpected denials or approvals could signal medical identity theft.
- Document all out-of-pocket losses. Keep receipts and records—these may be recoverable in a future settlement.
Can You File a Lawsuit or Claim Compensation?
State and federal privacy laws allow victims to seek monetary relief when an organization fails to adequately safeguard sensitive information. Potential damages include:
- Reimbursement for identity-theft losses and credit-monitoring costs
- Compensation for time spent addressing fraud
- Statutory damages where permitted by law
If you received ApolloMD’s notice—or suspect your data was involved—you may qualify to join a class-action lawsuit or pursue an individual claim.
Need to Verify Your Eligibility?
Experienced data-privacy attorneys can evaluate your situation at no out-of-pocket cost. Consultation is quick and confidential.
Download Official Breach Notice (PDF)Frequently Asked Questions
How do I know if ApolloMD leaked my data?
ApolloMD mailed letters starting September 17, 2025. If your contact information is outdated or you believe you were treated by an affiliated practice, call their incident-response line at 833-397-6797.
What should I do if my ApolloMD Social Security number was exposed?
Enroll in the free credit monitoring offered, place a fraud alert with one credit bureau, and consider a credit freeze for maximum protection.
Will joining an ApolloMD data breach lawsuit cost me anything?
Most data-breach class actions are handled on a contingency basis. You typically pay nothing unless the case is successful.
Can medical identity theft affect my health-insurance benefits?
Yes. Fraudulent claims can exhaust plan limits or cause denials for legitimate treatments. Review EOBs and contact your insurer about any discrepancies.
How long will the ApolloMD investigation take?
Legal proceedings can span months or even years. Staying informed and preserving documentation will strengthen any future claim you choose to pursue.