- Threat actor claims to have stolen 1.24 million sensitive health files from Doctor Alliance
- Leaked data includes prescriptions, diagnoses, insurance information and personal contact information
- Breach risk includes fraud, extortion, lawsuits and long-term reputational damage
Doctor Alliance, an American healthcare technology company, has reportedly suffered a cyber attack that saw it lose more than a million sensitive files.
Security researchers from Cyber news discovered a new post on an underground hacking forum where a threat actor said they stole 1.24 million files, totaling 353 gigabytes in size, from Doctor Alliance.
The hacker demanded $200,000 in exchange for deleting the files and uploaded a small 200 MB sample which Cyber news the team analyzed and found that it contains prescriptions, treatment plans, check-up summaries, hospital orders, people’s names, health insurance claim numbers, home addresses, phone numbers, diagnoses and doctor names.
Huge potential for abuse
Doctor Alliance has not yet commented on the news. If the stolen archive turns out to be legitimate, it can pose a great risk to the company’s customers, as the information can be used in all kinds of social engineering and fraud attacks.
With 1.24 million stolen health records, attackers can commit identity theft, insurance fraud and targeted extortion by threatening to leak sensitive medical details. Aggregated data enables doxxing (public disclosure of a person’s private personal information online without consent), harassment and extortion of high-value victims.
Attackers can file false claims, obtain prescriptions or controlled substances, and exploit medical histories to create convincing social-engineering or phishing campaigns.
Sometimes hackers will combine leaked data with data from previous leaks, creating detailed victim profiles that can help them take over other accounts through credential stuffing and brute-forcing. Finally, nation-states or criminal groups may use the files for long-term surveillance, targeted fraud or discriminatory abuse.
On top of all this, Doctor Alliance could face class action lawsuits and regulatory fines. All in all, big leaks like this hurt bottom lines, erode brand image and lose customers.
Doctor Alliance specializes in document management and billing optimization solutions for doctors and home care agencies. Its headquarters are in Dallas, Texas.
The best antivirus for all budgets
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews and opinions in your feeds. Be sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, video unboxings, and get regular updates from us on WhatsApp also.



