







Between May 22 and May 23, 2025, Trinity Emergency Physicians, an Alabama-based emergency medicine group, was affected by a significant data breach involving its business associate, ApolloMD Business Services. The incident was first detected on May 22, 2025 by ApolloMD, a company providing administrative services to healthcare organizations.
An investigation was launched and revealed that a cyberattack took place between May 22, 2025 and May 23, 2025. A ransomware group known as Qilin claimed responsibility for hacking files containing personal and protected health information belonging to patients. The total number of affected patients has not been released, but includes multiple physician practices ApolloMD was associated with.
Exposed information included names, Social Security numbers, dates of birth, addresses, diagnosis information, provider names, dates of service, treatment details, and health insurance information. Data breach notices were mailed to impacted patients on Sept. 17, 2025.
ApolloMD also published a Notice of Data Security Incident on its website. The breach is considered severe as the the combination of both PII and PHI can put individuals at a very high risk for identity theft and medical fraud.
In response to the breach, ApolloMD, on behalf of Trinity Emergency Physicians and other impacted practices, took steps to secure its systems and engaged law enforcement.
If you receive a data breach notice from ApolloMD, Trinity Emergency Physicians or a hospital you received treatment at, you may want to:
ApolloMD has also set up dedicated toll-free incident response line has been set up at 833-397-6797, available Monday through Friday from 8 a.m. to 8 p.m. Eastern time.

.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)