PLG CLASS ACTION DIRECTORY
Arkansas Heart Hospital Data Breach Investigation
Arkansas Heart Hospital Data Breach
Overview
On March 15, 2025, Arkansas Heart Hospital, LLC (“Arkansas Heart Hospital”) was notified by a third-party vendor of a cybersecurity incident involving unauthorized access to patient data. While Arkansas Heart Hospital’s own systems were not compromised, the breach affected systems used by a vendor during the hospital’s transition to a new electronic medical records platform. The vendor later confirmed the unauthorized access took place between January 22 and February 20, 2025.
Patients who received care at Arkansas Heart Hospital between January 1, 2022 and January 31, 2025 may be affected. The hospital is in the process of identifying and notifying impacted individuals and has offered credit monitoring and identity protection services.
Allegations
It is alleged that sensitive patient data was not adequately safeguarded during Arkansas Heart Hospital’s migration to a new electronic medical records system. Although the breach occurred within a vendor’s systems, Arkansas Heart Hospital may still bear responsibility for failing to ensure that patient data was handled with the appropriate level of security and oversight.
Were you a patient at Arkansas Heart Hospital between January 1, 2022 and January 31, 2025?
Your personal information may have been compromised in a recent data breach.
What Went Wrong?
The incident involved unauthorized access to patient information stored within systems managed by a vendor—not systems operated by Arkansas Heart Hospital itself. The breach occurred over a four-week period and affected data belonging to patients who received care over a span of three years.
The types of personal information potentially exposed include:
- Full name, date of birth, address, phone number, and email
- Social Security Number
- Diagnosis and treatment details
- Prescription and provider information
- Health insurance and medical record numbers
- Marital status, ethnicity, language, and other demographic data
- Living will indicators and death/deceased status
Arkansas Heart Hospital has acknowledged the incident and stated it is working with law enforcement and cybersecurity experts to investigate. However, many patients may have already been put at risk for identity theft and financial fraud.
How Poynter Law Group Can Help
Poynter Law Group is currently gathering information from individuals affected by the Arkansas Heart Hospital data breach to evaluate potential legal claims. If your personal or medical information was compromised, you may be eligible for compensation, support in enrolling in credit and identity monitoring services, and legal guidance at no cost to you. Our team is here to help you understand your rights and take the first step toward holding those responsible accountable.
Schedule Your Case Evaluation Today.
Facing high stakes and complex challenges? You're not alone. Poynter Law Group stands with you, turning your battle into ours for a shared victory.