On December 9, 2025, Advanced Healthcare Professionals filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Texas AG show that Advanced Healthcare Professionals confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Advanced Healthcare Professionals operates as a specialized medical staffing and healthcare services organization, acting as a critical bridge between qualified clinical personnel and healthcare facilities throughout Texas. Because of its core operations, the company routinely collects, processes, and stores vast quantities of highly sensitive personal and professional data. This encompasses comprehensive employment and credentialing records for physicians, nurses, and allied health professionals, as well as extensive health insurance, billing, and patient care documentation generated through its clinical service delivery. Maintaining this repository of confidential information is essential for healthcare placement, regulatory compliance, and payroll administration, making the organization a central repository for deeply private records.
In 2025, Advanced Healthcare Professionals officially reported a significant security incident to the Texas Attorney General, alerting authorities and the public that its digital environment had been compromised. While the full mechanics of the intrusion continue to be examined, incidents affecting specialized healthcare service providers typically involve sophisticated network compromises, unauthorized intrusions into centralized databases, or vulnerabilities introduced via third-party administrative and scheduling vendors. These types of attacks are deliberately engineered by malicious actors to bypass legacy security perimeters, allowing unauthorized third parties to dwell within internal networks undetected and exfiltrate large volumes of confidential files before detection.
The data compromised in this breach extends far beyond standard consumer identifiers, laying bare a dangerous combination of sensitive personal, financial, and healthcare-related information. Exposed records frequently include full legal names, dates of birth, Social Security numbers, banking and direct deposit details, medical record numbers, health insurance policy identifiers, and detailed clinical treatment or diagnostic documentation. The exposure of this information creates severe, long-term risks for affected individuals. Compromised Social Security numbers and banking details expose victims to immediate financial fraud, tax identity theft, and unauthorized account takeovers, while leaked medical and health insurance data opens the door to sophisticated medical identity theft, fraudulent insurance claims, and targeted extortion schemes.
As an entity handling sensitive medical and financial data, Advanced Healthcare Professionals was bound by strict legal duties to safeguard its digital infrastructure. Under federal frameworks such as the Health Insurance Portability and Accountability Act (HIPAA), as well as state-level consumer protection statutes like the Texas Business and Commerce Code, the company had an affirmative legal obligation to implement robust administrative, physical, and technical safeguards. This includes maintaining continuous network monitoring, executing regular vulnerability assessments, deploying advanced encryption, and maintaining stringent access controls. The occurrence of a widespread data breach strongly suggests a failure to meet these foundational security standards, raising serious questions about whether adequate safeguards were in place to prevent unauthorized intrusion.
For individuals who have received a data breach notification letter from Advanced Healthcare Professionals, this correspondence serves as formal acknowledgment that their private information was compromised due to corporate security failures. Legally, the receipt of this notice establishes the foundation necessary to participate in a class action lawsuit aimed at holding the company accountable. Affected individuals do not need to wait until they experience actual financial loss or identity theft to take legal action; the mere exposure and increased risk of future harm are sufficient to seek redress. Our firm handles these complex data privacy cases on a contingency fee basis, meaning clients pay nothing out of pocket and our legal fees are recovered only if we successfully secure a financial recovery on your behalf.
Notification Delay: Approximately 1 month elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from Advanced Healthcare Professionals
You were a customer, patient, employee, or client of Advanced Healthcare Professionals
Your personal information was stored in Advanced Healthcare Professionals's systems
Your Social Security number or driver's license number was exposed
Your medical records, diagnoses, or health insurance information was compromised
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Act quickly to protect your identity and preserve your claim. Four steps, in order:
Do not discard the Advanced Healthcare Professionals letter. It documents your standing as an affected individual — the foundation of any claim you file.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Deadlines apply to breach claims. A free review of your Advanced Healthcare Professionals letter takes minutes, and we only get paid if you do.
Security Incident
2025-11-06
Someone gained unauthorized access to data held in Advanced Healthcare Professionals's systems.
Reported to Attorney General
December 9, 2025
Advanced Healthcare Professionals filed its official breach notice with the Texas Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to Advanced Healthcare Professionals letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Reimbursement for the cost of credit monitoring services, identity theft protection, and related identity restoration expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
The unauthorized exposure of health and medical information may trigger HIPAA-related claims and additional state health privacy protections.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
These organizations also reported breaches to the Texas Attorney General. If their letters reached you too, each may carry its own claim.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris