Cardiovascular Associates

Cardiovascular Associates (CVA), a healthcare practice based in Birmingham, Alabama, experienced a data breach that was discovered on December 5, 2022. The breach resulted in unauthorized access to various types of sensitive personal and medical information of patients. The compromised data includes names, Social Security numbers, dates of birth, medical and treatment information, billing and claims information, financial account information, and credit/debit card information.

The unauthorized access occurred between November 28 and December 5, 2022, and it is estimated that the sensitive information of over 400,000 individuals may have been compromised