Methodist Homes of Alabama and Northwest Florida is notifying residents and employees of its second data breach in seven months.

According to DataBreaches[.]Net, Methodist Homes of Alabama and Northwest Florida is notifying residents and employees of its second data breach in seven months. On 6 January, the organisation reported that a compromised employee email account had been accessed between 8 May and 21 May 2025. For residents and patients, the account information included first and last name, Social Security number, date of birth, Medicare number, or medical treatment and condition information.

For those who were not residents, personal information involved first and last name plus one or more of the following data elements: Social Security number, passport number, driver’s licence or state identity card information, medical information, health insurance information, and online log-in information corresponding with the individual whose email account was compromised. The total number of individuals affected has not been disclosed, and it does not appear on HHS’s public breach tool yet.

This was Methodist Homes’ second breach in less than a year; on 30 January 2025 they notified HHS of a breach between 2 and 14 October 2024 affecting unauthorized access to their network, reported to HHS as affecting 908 patients, and in October 2025 the Maine Attorney General’s Office was notified that it affected 25,579 people.