
On Dec. 23, 2025, AllerVie Health, a leading provider of allergy and immunology services, disclosed a data breach exposing personally identifiable information (PII) of a limited number of individuals. The incident was the result of a ransomware attack by the ANUBIS group, which claimed responsibility on Nov. 26, 2025, via a posting on the Tor network.
On Nov. 2, 2025, AllerVie Health became aware of the breach, and concluded that a certain amount of sensitive information was accessed by unauthorized threat actors between Oct. 24, 2025, and Nov. 3, 2025.
Upon review, the company determined that the compromised information included sensitive PII, such as Social Security numbers, driver’s license or state ID numbers, and names.
The company disclosed the data breach to the New Hampshire Attorney General and the U.S. Department of Health and Human Services on Dec. 23, 2025, and the Massachusetts Attorney General on Dec. 24, 2025. AllerVie has notified impacted individuals by mail.
AllerVie has also posted a notice of the breach on its website.
The data breach has affected 80,521 total individuals, including seven from Massachusetts and two from New Hampshire.
Following the discovery of the ransomware attack, AllerVie Health initiated an investigation and began notifying affected individuals as required by law. The company is also offering impacted individuals complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company.
If you receive notification from AllerVie Health or your provider about this breach, you may want to:
For affected individuals with questions, AllerVie Health has set up a call center at 833-877-1419, Monday through Friday, 8 a.m. to 8 p.m. ET.








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)