Anchorage clinic notifies 70,000+ patients of data breach that leaked SSNs, medical info

Anchorage Neighborhood Health Center has notified 70,555 people of an August 2025 data breach, according to the Oregon attorney general.

The breach compromised patients’ names, Social Security numbers, dates of birth, state-issued ID numbers (e.g. driver’s license), medical treatment info, and health insurance info.

On August 26, 2025, ANHC announced that technical difficulties were preventing appointment scheduling and phone calls. Those disruptions lasted more than a week.

“We are writing to inform you that ANHC was subject to a criminal cyberattack that impacted our systems,” says ANHC’s recent notice (PDF) to victims.

An anonymous hacking group took credit for the breach and said it stole 23 TB of data from ANHC. The hackers initially claimed to have stolen 10,000 patient records before later increasing that number to 60,000.

Hackers listed Anchorage Neighborhood Health Clinic on a data leak site.
Hackers listed Anchorage Neighborhood Health Clinic on a data leak site.

ANHC has not verified the hacking group’s claim. We do not know how attackers breached ANHC’s network, if ANHC paid a ransom, or how much the hacking group demanded.

In response to Comparitech’s questions, ANHC provided the following statement:

“In September, Anchorage Neighborhood Health Center (“ANHC”) experienced a data security incident. Upon discovery, we took immediate steps to review our network security, and we launched an investigation with leading third-party cybersecurity experts to determine the nature and scope of the activity.

The incident was quickly contained, and our investigation was recently completed. It was determined that an unauthorized third party accessed certain non-public information within our network. However, there is no evidence indicating that any personal information has been used for identity theft or financial fraud. We have notified potentially affected individuals.
Protecting patient privacy and maintaining trust are our highest priorities at ANHC. We are extremely appreciative of the cooperation, understanding, and support of our employees, patients, and the Anchorage community during this time. As a community health center, ANHC’s mission is to provide accessible, affordable, and high-quality health care to all, and our vision is to ensure a healthy community where everyone has the opportunity to thrive. That commitment guides us in how we are addressing this incident.”

ANHC is offering eligible victims 12 months of free credit monitoring through Experian.

Ransomware attacks on US healthcare

Comparitech researchers have logged 85 confirmed ransomware attacks on US hospitals, clinics, and other healthcare providers in 2025 to date. This attack on ANHC is the 16th-largest by number of records compromised.

Other such recently confirmed attacks include:

  • Woodlawn Health (IN) notified patients of a July 2025 data breach by unknown ransomware attackers
  • Morton Drug Company (WI) notified 40,051 people of an August 2025 data breach claimed by Akira
  • Richmond Behavioral Health Authority (VA) notified patients of a September 2025 data breach claimed by Qilin

Ransomware attacks on US hospitals, clinics, and other care providers can steal data and lock down infected computer systems. They can cripple critical systems and endanger the health, privacy, and security of patients. Infected hospitals and clinics must pay a ransom or face extended downtime, data loss, and putting patients and staff at increased risk. Hospitals and clinics might resort to pen and paper, cancel appointments, and divert patients elsewhere until systems are restored.

About Anchorage Neighborhood Health Center

Anchorage Neighborhood Health Center serves more than 15,000 patients in Anchorage, Alaska. It offers medical, dental and behavioral health care plus a pharmacy.