Methodist Homes of Alabama & Northwest Florida, a faith-based nonprofit providing senior care services, suffered a cyberattack in October 2024. An unauthorized actor accessed its network between October 2–14, 2024, compromising sensitive personal and medical data of 25,579 individuals across the U.S. Exposed information included full names, Social Security numbers, dates of birth, driver’s license/state ID numbers, medical records (diagnoses, treatments, history), health insurance details, financial account/bank routing numbers, and patient account numbers. The breach was confirmed after a year-long investigation, with notifications sent to victims in October 2025. The incident was reported to the U.S. Department of Health and Human Services (HHS) and multiple state regulators. Affected individuals were offered free credit monitoring, but the exposure of highly sensitive health and financial data poses severe risks, including identity theft, financial fraud, and medical fraud. Legal firms are pursuing class-action lawsuits for compensation, citing violations of data protection laws and potential long-term harm to victims.