On March 6, 2025, Dove Healthcare discovered a significant data breach affecting the personal and health information of 16,255 individuals across the United States. The breach initially occurred on or around July 6, 2024, when unauthorized actors gained access to Dove Healthcare's network.
Upon identifying the incident, Dove Healthcare launched a thorough investigation, engaging external cybersecurity experts and notifying federal law enforcement. During this investigation, it was determined that certain files containing protected personal and health information were compromised.
The types of consumer information exposed in this breach include an array of PII like dates of birth and social security numbers. Alarmingly, the breach also included PHI like medical tests and treatments, mental health conditions, diagnoses, and full face photographs.
In response to the breach, Dove Healthcare notified affected individuals by mailing letters on March 18, 2025, providing details about the incident and guidance on protective measures.
Dove Healthcare has also established a toll-free response line at 1-833-998-6595, available Monday through Friday, 8:00 a.m. to 8:00 p.m. Eastern Time (excluding major U.S. holidays). Individuals can call this number to ask questions or obtain additional information about the breach.
For those whose Social Security numbers were involved, Dove Healthcare is offering complimentary credit monitoring services. Affected individuals are encouraged to enroll in these services to help detect and prevent potential identity theft or fraud.
Additionally, Dove Healthcare advises affected individuals to:
For full details about this incident, you can read Dove Healthcare's official Notice of Data Security Incident. Additionally, the breach disclosure is available on the Maine Attorney General's and Massachusetts Attorney Genera's websites.