Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded

On 7 November 2025, a relatively new user on a hacking forum offered data allegedly from Doctor Alliance for sale, according to DataBreaches[.]net. The post described 353 GB of data comprising 1,240,640 files and warned that the data would be sold if payment was not made, with a ransom demand of USD 200,000 and a deadline of 21 November 2025.

Doctor Alliance is a Texas‑headquartered vendor providing services to healthcare providers, and DataBreaches[.]net notes that, as a business associate, it has liability and responsibilities under HIPAA, including the requirement for a business associate agreement. The forum listing linked to a sample consisting of a compressed archive of 533 images of patient files, which purportedly contain sensitive personal and protected health information.

DataBreaches[.]net mentions at least one law firm had issued a release seeking potential plaintiffs, and a federal lawsuit Cateon v. Doctor Alliance LLC et al (3:25-cv-03079-E, Northern District of Texas) has been filed.