Almeida Law Group is investigating a data breach at Secure Healthcare Information Management, LLC. If you were affected, contact Almeida Law Group.
About Secure Healthcare Information Management, LLC
Secure Healthcare Information Management, LLC (SHIM) is a medical billing and management company based in Allentown, Pennsylvania. Founded around 2009, the company provides medical billing, coding, credentialing, revenue cycle management, and electronic health record (EHR) solutions to independent physicians and small-to-medium healthcare practices in Northeastern Pennsylvania. Because SHIM processes billing and medical records on behalf of healthcare providers, it functions as a HIPAA business associate and handles sensitive patient information for multiple medical practices.
What Happened?
Secure Healthcare Information Management, LLC was listed in a Vermont Attorney General breach report summary filed on October 7th, 2026. According to SHIM’s press release and the Vermont filing, an unknown actor gained unauthorized access to SHIM’s systems between July 6th, 2026 and July 16th, 2026. SHIM experienced a network disruption on July 17th, 2026, which prompted an investigation with cybersecurity experts. On September 18th, 2026, SHIM confirmed the full scope of the incident. Notice letters were mailed to potentially affected individuals on October 6th, 2026. The company also reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights.
The data exposed in the incident includes names, dates of birth, Social Security numbers, driver’s license or state identification numbers, medical information, and health insurance information. Because SHIM provides billing and management services for multiple physician practices, patients of various healthcare providers may be affected. No prior breaches or active litigation were found for SHIM. While SHIM described the incident as a “network disruption,” it has not publicly confirmed whether the event involved ransomware or named any threat actor.
Key Facts at a Glance
- Company or Organization: Secure Healthcare Information Management, LLC (SHIM)
- Industry: Healthcare business services — medical billing, coding, revenue cycle management, and EHR solutions (HIPAA business associate)
- Location: Allentown, Pennsylvania
- Incident type: Unauthorized access to personal information
- Date of breach: July 6th, 2026
- Date breach discovered: July 17th, 2026
- Date of consumer notification: October 6th, 2026
- Data types exposed: Names, dates of birth, Social Security numbers, driver’s license or state identification numbers, medical information, health insurance information
- Source: Vermont Attorney General breach report summary; SHIM Press Release — PR Newswire
What Should You Do?
If you received a notice from SHIM or believe your information may have been involved, take steps now to protect yourself. Review any identity theft protection enrollment offer included with your notice and enroll before the deadline if one is provided. Place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — and obtain your free credit reports at AnnualCreditReport.com to check for accounts or inquiries you do not recognize. Because medical information and health insurance information were involved, carefully review your Explanation of Benefits statements from your insurer and request copies of your medical records to look for services you did not receive or providers you did not visit. Report any signs of identity theft or fraudulent medical claims to the Federal Trade Commission at IdentityTheft.gov.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
