Almeida Law Group is investigating a data breach at Health Prime International. If you were affected, contact Almeida Law Group.
About Health Prime International
Health Prime International (HPI) is a healthcare revenue cycle management and analytics company that provides medical billing, coding, practice management, analytics, and healthcare IT solutions to physician practices, hospitals, and health systems. Founded in 2003, the company serves mid- to large-sized physician groups across specialties including anesthesia, behavioral health, cardiology, emergency medicine, hospitalists, orthopedics, pain management, pathology, and radiology. Its headquarters are in National Harbor, Maryland, though the HHS filing lists the entity state as Illinois. In 2024, Aquiline Capital Partners made a majority investment in the company.
What Happened?
Health Prime International was listed in a HHS Office for Civil Rights breach portal report submitted on September 29th, 2026. The incident is classified as a hacking or IT incident, with breached information located on a network server and at least one other location. HPI reported 501 individuals affected, though that figure is commonly used as a placeholder when the full count has not yet been determined; the company’s own notice acknowledges that its investigation and data review remain ongoing.
On or about August 3rd, 2026, HPI learned that an unknown actor claimed to have accessed and acquired protected health information belonging to patients of certain HPI clients. The breached data was held on the platform of Tebra Technologies, a third-party cloud-based healthcare software company that HPI uses to support its clients’ digital operations, making this a supply-chain or vendor incident rather than a breach of HPI’s own infrastructure. HPI launched an investigation with third-party forensic specialists and posted a public notice on its website on September 29th, 2026. According to that notice, the types of information potentially exposed — varying by individual — include names, addresses, Social Security numbers, dates of birth, medical information, and health insurance information. No ransomware group or specific threat actor has been publicly attributed to this incident.
As of October 17th, 2026, no lawsuit has been filed over this specific September 2026 breach, though multiple law firms — including Shamis & Gentile P.A. and attorneys working with ClassAction.org — are investigating potential class action claims. Separately, an unrelated contract class action (Knoblich et al v. Health Prime International, LLC et al, No. 8:25-cv-01033) was filed in the U.S. District Court for the District of Maryland on March 28th, 2025, and an earlier, unrelated incident involving ALN Medical Management — now part of HPI — disclosed unauthorized access to a third-party hosted environment between March 18th, 2024 and March 24th, 2024.
Key Facts at a Glance
- Company or Organization: Health Prime International
- Industry: Healthcare Revenue Cycle Management / Healthcare IT Services
- Location: National Harbor, Maryland (HHS filing lists Illinois)
- Incident type: Hacking/IT Incident
- Date breach discovered: August 3rd, 2026
- Date of consumer notification: September 29th, 2026
- Total persons affected: 501 (likely a placeholder pending full investigation)
- Prior breach: ALN Medical Management (now part of HPI) disclosed unauthorized access to a third-party hosted environment in March 2024
- Litigation status: No lawsuit filed over this incident as of October 17th, 2026; multiple law firms investigating potential class action claims
- Source: HHS Office for Civil Rights breach portal report; ClassAction.org; ClaimDepot; Settlement Insight
What Should You Do?
If you received a notice from Health Prime International, take steps now to protect yourself. Review any Explanation of Benefits statements from your health insurer and check your medical records for services you did not receive, as health and insurance information was potentially exposed. Place a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — and monitor your credit reports for unfamiliar accounts or inquiries. You can request free annual credit reports at AnnualCreditReport.com. Because Social Security numbers were among the data types potentially involved, consider enrolling in any identity theft protection service HPI may offer affected individuals. If you suspect misuse of your information, report it at IdentityTheft.gov, where you can also build a personal recovery plan.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
