Avosina Healthcare Solutions, a physician-owned revenue cycle management and healthcare IT services provider, suffered a significant data breach in July 2025. An unknown threat actor, later identified as the ransomware group Qilin, compromised parts of their system, exfiltrating document files and applications tied to SomnoSleep Consultants, LLC—a third-party client. The breach exposed sensitive personally identifiable information (PII), including patient names, addresses, medical records, and health insurance details. Qilin claimed responsibility and leaked details on the dark web in August 2025, while Avosina notified affected parties in September and November 2025. The incident posed risks of identity theft, financial fraud, and unauthorized access to protected health information (PHI), prompting legal investigations for potential compensation claims. Patients were advised to monitor accounts, enroll in identity theft protection, and seek legal recourse for damages, including emotional distress and out-of-pocket expenses.

Avosina Healthcare Data Breach Exposes Personal Information of Over 40,000 Individuals Virginia-based healthcare service provider Avosina Healthcare Solutions disclosed a data security incident from last year that compromised the sensitive personal information of more than 40,000 individuals. The breach, which occurred in 2024, involved unauthorized access to protected data, though specific details about the attack vector and the exact timeline remain undisclosed. The exposed information likely includes personally identifiable details, though the full scope of the compromised data has not been publicly confirmed. Avosina Healthcare serves as a critical provider in the U.S. healthcare sector, making the incident particularly concerning for affected patients and regulatory bodies. The breach highlights ongoing vulnerabilities in healthcare data security, where sensitive records remain a prime target for cybercriminals. As investigations continue, the incident underscores the need for strengthened safeguards in the industry. No further updates on remediation or regulatory actions have been released at this time.