NOTICE OF DATA SECURITY EVENT
Enhabit Home Health & Hospice (“Enhabit”) is providing notice of a recent incident at My 485, Inc. d/b/a Doctor Alliance (“Doctor Alliance”) that may affect the privacy of certain individuals’ personal information. Doctor Alliance offers a platform that facilitates medical care through the transmission of medical information between doctors and home health agencies and hospices. Certain medical providers may have used the Doctor Alliance portal to facilitate care at one or more entities affiliated with Enhabit. While Enhabit is unaware of any attempted or actual misuse of information, below are details of the incident, Enhabit’s response, and steps individuals may take to better protect their personal information, should they feel it appropriate to do so.
What Happened? On December 5, 2025, Enhabit was notified by Doctor Alliance of a potential data security incident that may have impacted certain Enhabit patient information hosted by Doctor Alliance. Doctor Alliance’s investigation determined that between October 31, 2025, and November 6, 2025, and again between November 14, 2025, and November 17, 2025, an unauthorized party accessed the Doctor Alliance platform using compromised credentials for a valid user account. Following discovery, Doctor Alliance notified home health and hospice providers, including Enhabit, that patient information may have been subject to the unauthorized activity by the party that compromised Doctor Alliance’s platform.
What Information Was Involved? Name, address, date of birth, gender, physician name, medical record number, certain clinical information, and health plan number may have been stored in the Doctor Alliance platform and may have been accessed by this unauthorized party. Neither social security number nor financial information was accessed by the unauthorized party.
What We Are Doing. Doctor Alliance reported it secured its system through the addition of authentication requirements, monitoring to detect anomalous activity, strengthening of firewall controls, and implementing additional authorization confirmation within the software involved. Doctor Alliance believes that the threat has been mitigated and is in the process of notifying the U.S. Department of Health and Human Services, Office of Civil Rights about this incident. Doctor Alliance also posted information about this event on its website: https://live.doctoralliance.com/Home/DataIncident.
Enhabit encourages individuals to remain vigilant against incidents of identity theft and fraud by reviewing account statements and monitoring free credit reports for suspicious activity and to detect errors. Please also review the Steps Individuals Can Take to Protect Personal Information, contained below, which includes additional information on what you can do to protect your information against misuse, should you feel it necessary to do so.
Whom Should Individuals Contact for More Information? Individuals with additional questions can call the dedicated assistance line at 1-844-425-7470 Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S. holidays.
Steps Individuals Can Take To Help Protect Personal Information
ADDITIONAL RESOURCES
Contact information for the three nationwide credit reporting agencies:
Equifax, PO Box 740241, Atlanta, GA 30374, www.equifax.com, 1-800-685-1111
Experian, PO Box 2104, Allen, TX 75013, www.experian.com, 1-888-397-3742
TransUnion, PO Box 2000, Chester, PA 19016, www.transunion.com, 1-800-888-4213
Free Credit Report. It is recommended that you remain vigilant by reviewing account statements and monitoring your credit report for unauthorized activity, especially activity that may indicate fraud and identity theft. You may obtain a copy of your credit report, free of charge, once every 12 months from each of the three nationwide credit reporting agencies.
To order your annual free credit report please visit www.annualcreditreport.com or call toll free at 1-877-322-8228.
You can also order your annual free credit report by mailing a completed Annual Credit Report Request Form (available from the U.S. Federal Trade Commission’s (“FTC”) website at www.consumer.ftc.gov) to:
Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348-5281.
Fraud Alerts. There are two types of fraud alerts you can place on your credit report to put your creditors on notice that you may be a victim of fraud—an initial alert and an extended alert. You may ask that an initial fraud alert be placed on your credit report if you suspect you have been, or are about to be, a victim of identity theft. An initial fraud alert stays on your credit report for at least one year. You may have an extended alert placed on your credit report if you have already been a victim of identity theft and you have the appropriate documentary proof. An extended fraud alert stays on your credit report for seven years. You can place a fraud alert on your credit report by contacting any of the three national credit reporting agencies.
Security Freeze. You have the ability to place a security freeze, also known as a credit freeze, on your credit report free of charge.
A security freeze is intended to prevent credit, loans and services from being approved in your name without your consent. To place a security freeze on your credit report, you may use an online process, an automated telephone line, or submit a written request to any of the three credit reporting agencies listed above. The following information must be included when requesting a security freeze (note that, if you are requesting a credit report for your spouse, this information must be provided for him/her as well): (1) full name, with middle initial and any suffixes; (2) Social Security number; (3) date of birth; (4) current address and any previous addresses for the past 5 years; and (5) any applicable incident report or complaint with a law enforcement agency or the Registry of Motor Vehicles. The request must also include a copy of a government-issued identification card and a copy of a recent utility bill or bank or insurance statement. It is essential that each copy be legible, and display your name, current mailing address, and the date of issue.
Federal Trade Commission and State Attorneys General Offices. If you believe you are the victim of identity theft or have reason to believe your personal information has been misused, you should immediately contact the Federal Trade Commission and/or the Attorney General’s office in your home state. You may also contact these agencies for information on how to prevent or minimize the risks of identity theft.
You may contact the Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580, www.ftc.gov/bcp/edu/microsites/idtheft/, 1-877-IDTHEFT (438-4338).