Cardiovascular Associates Holdings, LP

Cardiovascular Associates, a cardiology practice in Birmingham, Alabama, disclosed a data security incident where an unauthorized third party accessed systems and exfiltrated data between November 28, 2022, and December 5, 2022. Affected individuals include current or former employees and affiliated medical practice staff. Compromised data included names, dates of birth, addresses, Social Security numbers, passport/driver's license numbers, and financial account information. Health/medical information was not involved. The organization engaged a forensic firm, restricted access, and is offering identity monitoring.