Alvita Care Holdings Data Breach Exposes Financial Account Info

Alvita Care Holdings, a private home care provider based in New York City, disclosed a data breach that exposed sensitive personal and financial information.

The breach was disclosed attorneys general offices of Massachusetts and Vermont

The breach was discovered when Alvita Care received information about an unknown third party claiming to be in possession of company data. A subsequent investigation determined that the unauthorized third party gained access through a third-party software application that Alvita Care used to manage client services.

Through this software application, the unauthorized party was able to extract certain data from the company's information systems over a span of approximately three months, between March 25, 2026, and June 26, 2026.

The types of information exposed included Social Security numbers, financial account codes, credit and debit account information, and credit and debit card numbers.

Alvita Care Holdings' response to the breach

The company is offering affected individuals complimentary identity protection services through IDX, a consumer identity protection company.

Each affected individual received a personalized enrollment code in their notification letter to use when signing up for the protection services. Individuals can enroll by calling 1-888-201-2039 or by visiting the IDX enrollment page. The enrollment deadline is Dec. 4, 2026.

The company has also set up a dedicated call center to assist affected individuals with questions about the incident. The call center can be reached at 1-888-201-2039 and is available Monday through Friday from 9 a.m. to 9 p.m. ET, excluding U.S. holidays.