Methodist Homes of Alabama & Northwest Florida experienced a cyberattack. On Oct. 14, 2024, the healthcare organization detected unusual activity within its computer network. An investigation determined that unauthorized actor gained access to certain sensitive information between Oct. 2, 2024, and Oct. 14, 2024.
The data breach compromised both personally identifiable information (PII) and protected health information (PHI) and affected at least 25,579 individuals in the United States. Exposed information included names, Social Security numbers, dates of birth, driver license or state ID numbers, state identification card numbers, bank routing numbers, financial account numbers, Methodist/Methodist numbers, health insurance information, health insurance numbers, medical record numbers (MRN), patient account numbers, clinical information, diagnosis and treatment details, medical diagnosis, medical history information and type of discharge.
This type of data breach puts patients at risk for identity theft and medical fraud. Methodist Homes began notifying impacted individuals by mail Oct. 3, 2025. The company also published a notice of data security incident on its website on the same day.
The data breach was disclosed to the U.S. Department of Health and Human Services on Jan. 30, 2025. The incident was also reported to the Maine Attorney General's office and the New Hampshire Attorney General on Oct. 7, 2025.
Upon detecting the breach, Methodist Homes of Alabama & Northwest Florida secured their systems and took some of their network offline. In addition to required state and federal disclosures, the organization is offering impacted individuals complimentary credit monitoring and identity protection services through TransUnion Cyberscout.
If you receive notification from the organization about this breach, you may want to:
Methodist Homes of Alabama & Northwest Florida has established a dedicated assistance line for questions at 1-833-833-7220, Monday through Friday, 8:00 am– 8:00 pm EST.
For more information about the organization, visit the Methodist Homes of Alabama & Northwest Florida website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.