Notice of Breach of Protected Health Information
Mobile, Alabama — Vascular Associates of South Alabama ("VASA") is providing notice of an incident that may have affected the privacy of certain individuals' protected health information, as required by the Health Insurance Portability and Accountability Act ("HIPAA").
What Happened
During the months of June and July, 2026, an employee of VASA made an unauthorized download of certain electronic records containing patient information and emailed it to two unauthorized email addresses. VASA discovered the incident on July 29, 2026, and immediately initiated an investigation.
What Information Was Involved
The incident may have involved certain individuals' protected health information, including patient names, dates of birth, dates of service, procedure codes, procedures, diagnosis codes, insurance identification numbers, and billing data.
What VASA Is Doing
Upon discovering this incident, VASA promptly launched an investigation and was able to determine the nature and extent of the breach. VASA is working with third parties and to prevent further dissemination of the information that was subject to the unauthorized download. VASA has notified the U.S. Department of Health and Human Services and is providing individual written notice to affected individuals in accordance with applicable law.
What Affected Individuals Can Do
VASA recommends that affected individuals take the following steps to protect themselves:
- Review health insurance statements and explanation of benefits (EOB) forms for any services or charges not authorized or received, and report anything suspicious to the health insurance plan immediately.
- Obtain free credit reports from the three major credit reporting agencies by visiting www.annualcreditreport.com or calling 1-877-322-8228.
- Consider placing a fraud alert or credit freeze by contacting any one of the three major credit reporting agencies:
- Equifax: 1-800-525-6285 | www.equifax.com
- Experian: 1-888-397-3742 | www.experian.com
- TransUnion: 1-800-680-7289 | www.transunion.com
- Report suspected identity theft to the Federal Trade Commission at www.identitytheft.gov or by calling 1-877-438-4338, or to local law enforcement.
For More Information
Individuals who believe they may be affected or who have questions about this incident may contact VASA by any of the following means:
- Email: david.sweet@mykidneydoc.net
- Website: https://www.myvasadoc.net
- Postal Mail: 1551 Old Shell Road, Mobile, Alabama 36604
VASA takes the privacy and security of the individuals it serves very seriously and sincerely regrets any concern this incident may cause.