2025 Anatomic and Clinical Laboratory Associates — network breach; 169,626 patients
Data compromised
Names plus one or more of: date of birth, Social Security number, taxpayer identification number, dates of service, medical provider names, mental/physical condition, medical treatment/procedure information, diagnosis or clinical information, medical history, patient account number, and/or medical record number
Technical writeup
Verified healthcare data breach — Nashville pathology group notification covered by HIPAA Journal (July 24, 2026). Anatomic and Clinical Laboratory Associates, P.C. launched an investigation on December 1, 2025 after anomalous activity on its computer network and confirmed unauthorized access with third-party cybersecurity assistance. A data review completed April 27, 2026 found PHI of 169,626 current and former patients may have been exposed. Notification letters mailed June 23, 2026; credit monitoring offered to certain individuals based on data types involved. The public notice reviewed did not state a precise intrusion window beyond the December 1 discovery.
Root cause
Anomalous activity identified December 1, 2025; investigation confirmed unauthorized network access; patient PHI review completed April 27, 2026