Cyber Attack

In early September 2025, Virmedice, LLC (“Virmedice”), an Arizona IT Service and IT Consulting company that stores medical records, detected suspicious activity trying to attack its administrative servers. Virmedice promptly hired a third-party to investigate the attack. In October of 2025, Virmedice discovered from its third-party investigator that, in late August 2025, a threat actor had also targeted files that contained protected health information. At this time, Virmedice has no actual confirmation of what may have been taken, but the investigation noted a strong likelihood exists that protected health information (including the potential for names, social security numbers, etc.) was taken by the attack that occurred in late August 2025.

Virmedice provided prompt notice to individuals of the attack to its administrative servers in September 2025 and also filed the applicable HHS notice in late October 2025 once the targeted attack to personal health information was discovered, which were amended on December 5, 2025 to conform with the third-party investigation. At this time, Virmedice has no evidence of misuse or attempted misuse of this personal information as a result of this incident. This notification is submitted as part of the HHS requirements given the potential for the breach to affect more than 500 residents of Arizona.

Based on the current investigation, the present and former Arizona business customer data owners that may have been targeted are listed below:

• Healing Hearts Pediatric, PLC
• Phoenix Urological Surgeons, PC
• Gary W. Eden
• Central Arizona Medical Associates
• Midwest Academy of Pain & Spine

Notifications are expected to continue over the coming weeks if new information is obtained. Prior notifications recommend that affected individuals remain vigilant for signs of identity theft or fraud by reviewing account statements and monitoring their credit reports. Information on how to take additional protective measures also is included in the individual notifications.

If you have any questions, please contact Virmedice at 623-239-3181.