Arkansas Heart Hospital Data Breach Lawsuit Investigation
Did you receive a data-breach notice from Arkansas Heart Hospital? A vendor’s cyber-attack has put sensitive patient data at risk. Act now to learn how to protect your identity—and find out whether you can pursue compensation.
Download Official Notice (PDF)What Happened?
On , Arkansas Heart Hospital (AHH) learned that one of its technology vendors experienced unauthorized access to patient information stored on the vendor’s systems. The attack window lasted from to . The hospital’s own networks were not breached; however, data transferred to the vendor during AHH’s electronic medical-record migration was exposed.
The hospital believes patients treated at any AHH facility between and could be impacted. Law-enforcement agencies have been notified, and independent cybersecurity experts are assisting with the investigation.
What Information Was Exposed?
The vendor’s investigation indicates both personally identifiable information (PII) and protected health information (PHI) may have been viewed or stolen:
- Names, addresses, phone numbers, email addresses, dates of birth, and Social Security numbers
- Government-issued IDs, ethnicity, sex, maiden name, marital status, and religious affiliation
- Medical record numbers, treatment and diagnosis details, prescription data, provider names
- Health-insurance information, death/deceased status, living-will indicators
- Financial information tied to billing or insurance
Arkansas Heart Hospital’s Response
AHH is mailing notification letters as addresses are confirmed and is offering complimentary credit-monitoring and identity-protection services. If you have questions or wish to enroll:
- Call the dedicated hotline at 1-833-998-7785, Monday–Friday, 7 a.m.–7 p.m. CT (excluding holidays).
- Or write to: Arkansas Heart Hospital, 1701 South Shackleford Rd., Little Rock, AR 72211
Steps You Can Take Now
Whether or not you have received a letter, consider the following actions immediately:
- Monitor Your Credit—Request free reports from each bureau at AnnualCreditReport.com.
- Place a Fraud Alert or Credit Freeze—Contact the bureaus directly:
- TransUnion: 1-800-680-7289 | transunion.com
- Experian: 1-888-397-3742 | experian.com
- Equifax: 1-888-298-0045 | equifax.com
- Review Statements—Check medical EOBs, bank and credit-card statements for unfamiliar activity.
- Report Identity Theft—If you spot fraud, file a report with the FTC at IdentityTheft.gov and notify your state Attorney General.
Can You File a Data Breach Lawsuit?
U.S. privacy laws allow victims of negligent data security to seek financial relief for:
- Out-of-pocket costs (credit reports, notarization, postage, etc.)
- Time spent addressing fraud or identity-theft issues
- Emotional distress and loss of privacy
- Future credit-monitoring services
Class-action investigations are under way to determine whether Arkansas Heart Hospital and its vendor used reasonable cybersecurity practices. If you received a breach notice—or believe you should have—you may be eligible to join. Completing a free case evaluation preserves your rights and helps ensure stronger security standards industry-wide.
Timeline of Key Events
- – Start of period for potentially affected patient services
- – First known date of unauthorized system access
- – Last known date of unauthorized system access
- – Arkansas Heart Hospital notified of breach
- Ongoing – Notification letters mailed; credit-monitoring offered; legal investigations launched
Frequently Asked Questions
How do I know if the Arkansas Heart Hospital data breach affects me?
AHH is mailing notices to all patients whose information was stored on the compromised vendor system. If you received care between January 1 2022 and January 31 2025, you are within the potentially affected group. Call 1-833-998-7785 if you are unsure.
What types of compensation are available through an Arkansas Heart Hospital data breach lawsuit?
Potential awards may include reimbursement for identity-theft expenses, future credit-monitoring, compensation for time spent mitigating fraud, and statutory damages allowed under state laws.
Does accepting free credit monitoring from Arkansas Heart Hospital limit my legal rights?
No. Enrolling in the hospital’s offered services does not waive your right to pursue legal claims for damages related to the data breach.
Should I replace my Social Security card or other IDs after the Arkansas Heart Hospital breach?
Replacing documents is typically only necessary if fraud has occurred. Monitor your credit closely; if your Social Security number is misused, the FTC or Social Security Administration can guide you through replacement or protective measures.
How long do I have to file a claim?
Limitation periods vary by state—often two to four years from the date you discovered the breach. Contact a qualified data-privacy attorney promptly to preserve your rights.