AllerVie Health Allergy & Immunology Breach (2025): 169K Patient SSN Exposed

About Allervie Health

AllerVie Health is a U.S.-based network of allergy, asthma, and immunology specialty clinics, headquartered in Frisco, Texas. The company operates more than seventy clinic locations across multiple U.S. states, providing services including allergy testing, asthma management, chronic respiratory care, immunotherapy, and related specialty treatments. As a HIPAA-regulated healthcare provider, AllerVie maintains substantial volumes of protected health information including patient identity, contact, insurance, billing, diagnostic, and treatment records, alongside Social Security numbers and other administrative identifiers used for insurance verification and care coordination.

Why They Hold Your Data

Specialty clinic networks collect patient identity, contact, and insurance-linked records, often including SSNs and other sensitive administrative data tied to care delivery.

Recent Developments

AllerVie Health discovered unusual network activity on November 2, 2025 and engaged external cybersecurity experts to investigate. The forensic review concluded on November 24, 2025 and identified the affected fields. The company began notifying affected individuals by mail on December 22, 2025 and disclosed the incident to the New Hampshire Attorney General on December 23, 2025. The Anubis ransomware group claimed responsibility for the attack on November 26, 2025 by listing AllerVie on its dark-web leak site and publishing samples of stolen medical files. AllerVie is offering complimentary credit monitoring and identity-theft protection through Cyberscout, a TransUnion company. Class-action investigations by U.S. plaintiff law firms began in late December 2025.

Data Points Exposed

Breach Impact

AllerVie faces significant institutional cost from the incident. Federal HIPAA notification obligations, U.S. Department of Health and Human Services Office for Civil Rights filings, multistate attorney-general filings, and a class-action litigation pipeline are all underway. The Anubis ransomware group's posting of medical-record samples on its leak site adds direct evidence of data exfiltration that strengthens future litigation. AllerVie's specialty position in allergy and immunology care means the patient base includes both adults and pediatric patients, broadening the potential affected population. Operationally, the company reset passwords, notified law enforcement, and reviewed data-protection policies. Reputational damage is concentrated within the Texas and broader U.S. specialty-clinic market.

Exploitation & Downstream Threats

• Identity theft and synthetic identity construction using government-issued IDs | • SIM swap attacks where phone numbers are present | • Targeted phishing campaigns using exposed email addresses | • Doxxing risk from physical address exposure

What You Should Do

1. Freeze credit at all three bureaus and monitor for new-account and tax-refund fraud.
2. Treat the home address as exposed: review mail and package handling and physical-security routines, and brief household staff to verify unusual requests.
3. Guard against SIM-swap and vishing: add a carrier port-out PIN and verify any 'support' calls independently.
4. Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.

How ObscureIQ Can Help

1. Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
2. Exposure mapping and footprint neutralization: cross-reference against broker-available data and suppress still-removable elements, prioritizing address and phone, since this record re-seeds broker networks.
3. ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).