Doctor Alliance Breach: 353GB of Patient Data Exposed

On Nov. 7, 2025, Doctor Alliance, a Dallas-based healthcare technology provider, was allegedly alerted that an online hacker, "Kazu", infiltrated its files and would release them unless a ransom was paid.

According to the hacking group, they obtained more than 1.2 million files, totaling 353 GB of data.

The compromised information potentially includes names, addresses, phone numbers, Social Security numbers, dates of birth, medical or treatment information and health insurance information.

The breach was first reported by a cybersecurity news outlet, which noted that the attacker is demanding a ransom for the data.

The scale and scope of this cybersecurity incident may be significant, as Doctor Alliance’s platform integrates with electronic health record (EHR) systems and processes high volumes of clinical and administrative data for healthcare organizations nationwide.

The exposure of both PII and PHI raises serious concerns about identity theft, medical fraud, and the privacy of affected individuals.

Doctor Alliance's response

As of this writing, Doctor Alliance has not published a public statement detailing the full extent of the breach or the specific actions being taken in response.

Those who may be affected are encouraged to:

• Monitor their credit reports and medical billing statements for unusual activity
• Contact their healthcare provider to discuss any concerns about compromised records
• Be cautious of unsolicited communications requesting sensitive information
• Consider placing a fraud alert or credit freeze with major credit bureaus

It is also advisable to follow any official guidance or notifications from Doctor Alliance as they become available.