Anatomic Clinical Laboratory Associates 2026 Data Breach
Healthcare / Pathology & Diagnostic Laboratory / Consumer
Anatomic Clinical Laboratory Associates 2026 Data Breach: Patient PHI Exposed via Insomnia
Nashville-based anatomic and clinical pathology laboratory group.
Confirmed · ObscureIQ Intelligence
Breach Risk Index i
100/100
Lower riskHigher risk
High and current: recent, valuable data circulating on the dark web now.
Data Sensitivity i
ElevatedExposed data raises the risk of fraud, targeting, and impersonation. Proactive steps are warranted.
214k rowsRecords
2026Year
The Breach Risk Index (BRI) is a proprietary 0–100 score rating how dangerous a breach is right now, based on how recently the data has been circulating on the dark web and how valuable it is to attackers.
Crucial data exposed
SSNSocial Security Number
Gov IDTax ID
PHI / MedicalMedical Diagnosis; Medical Record Number
Breach Summary
On December 1, 2025 an unauthorized party accessed data at Anatomic Clinical Laboratory Associates; the Insomnia data-theft group publicly claimed the attack on February 7, 2026 and the lab began notifications June 23, 2026. Exposed data included names, dates of birth, Social Security numbers, medical information, medical record numbers, tax identifiers and patient account numbers.
Full threat analysis, exploitation vectors, and principal guidance below.
10 additional sections · verified field analysis · defensive doctrine
Querying breach corpus…
Cross-referencing exposed field types…
Resolving threat-actor attribution…
Compiling principal risk advisory…
214k rows records analyzed
About Anatomic Clinical Laboratory Associates
Anatomic Clinical Laboratory Associates, P.C. (aclapath.com) is a Nashville-based pathology group providing anatomic and clinical laboratory services to providers and patients.
Why They Hold Your Data
A pathology and diagnostic laboratory holds patient identity and contact data, dates of birth, Social Security numbers, health insurance and, in clinical records, diagnoses, test results and treatment history (PHI).
Recent Developments
The lab continues to operate. It began notifying individuals in June 2026 after the Insomnia group claimed the attack.
Data Points Exposed
6 verified field types
Date of Birth High
Full Name
Medical Diagnosis Critical
Medical Record Number High
Social Security Number Critical
Tax ID Critical
Breach Impact
As a diagnostic lab and HIPAA business associate, the breach exposed PHI across many referring providers' patients, with OCR notification and litigation following.
Principal Risk Advisory
What this means for a principal
A healthcare-linked breach: exposure ties a named individual to a provider relationship and, where clinical or insurance data is present, to conditions and treatment. For a high-profile principal this is targeting-grade, not merely identity-theft-grade: the combination lets an adversary locate, impersonate, or pressure the principal with little additional work.
What You Should Do
- Freeze credit at all three bureaus and monitor for new-account and tax-refund fraud.
- Watch for medical-benefit fraud and health-themed phishing that references real provider relationships.
- Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.
How ObscureIQ Can Help
- Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
- Exposure mapping: cross-reference the exposed identifiers against broker-available data to size and prioritize the principal's wider footprint.
- ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).
I
Threat Actor: InsomniaConfidence: Medium
Motivation: Financial extortion
A data-theft-and-extortion group that emerged October 2025 focused on stealing files (patient records, drivers licenses, tax forms) and threatening exposure rather than encrypting; over half its early victims are US healthcare organizations.
Protect Yourself
Check If You're Affected
Enter your email to check whether your data appears in this breach. We’ll send a 6-digit code to confirm it’s your address.
Get Free Breach Alerts
Be the first to know when new breaches are disclosed. Free forever — confirm your email with a 6-digit code.
High-Risk? Get an Exposure Audit
Executives, public figures, and high-visibility operators can receive tailored exposure intelligence and hardening guidance.
Request Consultation