AllerVie Health, a U.S.-based network of allergy, asthma, and immunology specialty clinics headquartered in Frisco, Texas, experienced a ransomware attack on its network between October 24 and November 3, 2025. The company discovered unusual activity on November 2, 2025 and engaged external cybersecurity experts to investigate. The Anubis ransomware group claimed responsibility for the attack on November 26, 2025 by listing AllerVie on its dark-web leak site and publishing samples of stolen medical files.\n\nThe breach affected approximately 169,000 individuals. Confirmed compromised fields in the public disclosure included names, email addresses, phone numbers, street addresses, and Social Security numbers. Public reporting and Anubis's leak-site samples indicated that the underlying data exfiltration also covered medical records, billing documents, internal schedules, insurance information, and diagnostic and treatment information specific to allergy and immunology care. Driver's license and state ID numbers were also identified in the affected dataset for some individuals.\n\nFor affected patients, the practical risk profile combines standard identity-fraud exposure with healthcare-specific risks. The combination of name, address, and Social Security number is a strong base for synthetic identity fraud and fraudulent credit applications. Inclusion in the dataset confirms the existence of an allergy or immunology care relationship, which can support medical-themed scam calls referencing real treatments, billing details, or insurance claims. Affected individuals should accept the credit monitoring offered by AllerVie, freeze credit at all three U.S. bureaus, monitor health-insurance explanation-of-benefits statements for unfamiliar charges, and treat unsolicited contact referencing AllerVie, allergy treatments, or insurance verification with caution.

Specialty clinic networks collect patient identity, contact, and insurance-linked records, often including SSNs and other sensitive administrative data tied to care delivery.

AllerVie Health discovered unusual network activity on November 2, 2025 and engaged external cybersecurity experts to investigate. The forensic review concluded on November 24, 2025 and identified the affected fields. The company began notifying affected individuals by mail on December 22, 2025 and disclosed the incident to the New Hampshire Attorney General on December 23, 2025. The Anubis ransomware group claimed responsibility for the attack on November 26, 2025 by listing AllerVie on its dark-web leak site and publishing samples of stolen medical files. AllerVie is offering complimentary credit monitoring and identity-theft protection through Cyberscout, a TransUnion company. Class-action investigations by U.S. plaintiff law firms began in late December 2025.