Huntsville Hospital Health System is notifying patients about a data breach involving one of its third-party electronic health record vendors that may have exposed sensitive personal information.
Third-Party Vendor Reports Data Breach
The incident involved Cerner, a third-party electronic health record vendor used by Huntsville Hospital Health System. The vendor informed healthcare organizations on Aug. 12, 2025, that an unauthorized party had accessed data it maintained.
Further investigation determined the unauthorized access began on Jan. 22, 2025. However, patients did not receive notification until this week.
Hospital officials explained that law enforcement requested a delay while investigators worked on the case. Once authorities approved public notification, Huntsville Hospital began contacting affected patients by mail.
Importantly, the hospital stated that its own internal computer systems were not compromised during the incident.
What Information May Have Been Exposed
According to the notification, the breach may have involved personal identifying information, including patient names and Social Security numbers.
In addition, some medical information may have been exposed. This could include diagnoses, treatment information, and test results maintained by the third-party vendor.
At this time, Huntsville Hospital has not indicated that the information has been misused. Nevertheless, officials encourage patients to remain vigilant and monitor their personal and financial accounts for suspicious activity.
Steps Patients Should Take
To help protect affected individuals, Huntsville Hospital is offering two years of identity protection services through Experian IdentityWorks Credit Plus. These services include credit monitoring, fraud detection, and identity restoration support.
Patients have also been automatically enrolled in Experian’s identity restoration program for the same two-year period.
Additionally, anyone with questions about the incident or the available protection services can contact the dedicated assistance line at 833-918-1119. Representatives are available Monday through Friday from 8 a.m. to 8 p.m.
As data security incidents continue to affect organizations across the country, experts recommend reviewing credit reports regularly, monitoring financial statements, and reporting any suspicious activity as soon as possible.
Sign up for the Homely Huntsville newsletter to stay up to date on Huntsville.
