Avosina Healthcare Solutions 2025 Data Breach (44.4 Thousand People Affected)

The 2025 Avosina Healthcare Solutions data breach was a security incident in which an unauthorized third party accessed information in an archived company file. Avosina says the affected system was not part of its active software.

The U.S. Department of Health and Human Services Office for Civil Rights recorded the event as a hacking/information-technology incident involving a network server and reported 44,425 affected individuals.

Verified Incident Timeline

Avosina discovered on July 29, 2025 that certain data in its systems had been accessed and compromised. The company secured its systems, investigated with outside specialists, and began mailing written notices on January 9, 2026 to potentially affected individuals for whom it had contact information.

What Information May Have Been Affected?

The scope may vary by person. The official notice lists names, addresses, medical information, and health-insurance information. The health-insurance data may have included insurance information, account-balance information, and medical procedure codes.

How the Organization Responded

Avosina says it secured its systems, notified law enforcement, and continues to evaluate data-security safeguards. The notice said there was no evidence of information misuse at that time and offered identity-protection services to eligible recipients.

What Should Affected People Do?

Notice recipients should review the data types listed in their individual letter and monitor health-insurance statements, medical bills, and account-balance records for unfamiliar services or amounts. Before responding to incident-related communications, recipients should verify the sender through Avosina's official channels.