Alliant Physical Therapy DATA Listed by alphv Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Alliant Physical Therapy DATA appeared on the leak site operated by the alphv ransomware group on April 21, 2022. The listing states that internal files were taken during a ransomware incident, though the number of people affected and the precise contents of the data remain undisclosed.

The incident is one of many claims made by ransomware operators against healthcare providers in 2022. Because the organization handles patient records, any confirmed exposure would involve information that is difficult to change and carries long-term privacy and financial implications.

What happened

On April 21, 2022, Alliant Physical Therapy DATA was listed on the alphv ransomware group’s leak site. The group claims to have exfiltrated internal files in a ransomware attack. No further details about the timing of the intrusion, the method of access, the volume of data, or any ransom demand have been made public.

The organization has not issued a public statement confirming or denying the listing, and the number of individuals whose information may be involved is not known.

Who is alphv?

ALPHV, also tracked publicly as BlackCat, is a ransomware-as-a-service operation that first appeared in late 2021. The group supplies encryption tools to affiliate attackers and commonly employs a double-extortion model: data is both encrypted on victim systems and copied for later publication if a ransom is not paid.

Public reporting has linked ALPHV to intrusions across multiple sectors, including healthcare. Listings on its leak site represent the group’s assertion that data was obtained; independent verification of each claim is not always available.

About Alliant Physical Therapy DATA

Alliant Physical Therapy DATA provides outpatient physical therapy services. Organizations of this type routinely collect and store patient names, dates of birth, contact information, insurance details, medical histories, treatment notes, and billing records.

Healthcare providers hold data that is both sensitive and subject to regulatory protections such as HIPAA in the United States. A breach at such an organization can affect individuals over extended periods because medical information is not easily replaced.

What was likely exposed

The only information released by the listing is that internal files were allegedly exfiltrated. The specific categories of data contained in those files have not been disclosed.

Physical therapy practices typically maintain electronic health records, appointment schedules, insurance claims, and administrative documents. Without a confirmed inventory, it is not possible to state which of these categories, if any, were taken.

Why it matters

Exposure of patient records can lead to identity theft, insurance fraud, or unwanted disclosure of medical conditions. Even when the exact scope remains unknown, the presence of a listing increases the chance that copies of files circulate among criminal actors.

For the organization, the incident adds operational costs for investigation, potential regulatory review, and the need to notify affected individuals if required by law. For patients, the primary concern is the long-term sensitivity of health-related information.

If your data was in this claimed breach

Monitor financial accounts and insurance statements for unusual activity. Request a copy of your medical records from Alliant Physical Therapy DATA to review what information the organization holds. Consider placing a fraud alert with credit bureaus and changing passwords for any patient portals.

Readers can run a free exposure scan of their email address against known breach data to check whether their information has appeared in other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.