Cullman, Alabama. -October 16, 2026 – Internal Medicine and Pediatrics of Cullman, P.С. (“IMPC”), a pediatric medical provider located in Alabama, announced today it is notifying patients whose personal information may have been involved in a recent network security incident. This notice is intended to alert potentially impacted individuals of the incident, steps we are taking in response, and resources available to assist and protect individuals.
What Happened
On October 1, 2026, we determined that personal information may have been impacted as the result of unauthorized access to our network environment first detected on May 22, 2026. Upon first learning of the incident, we did not have evidence suggesting sensitive data was impacted. We immediately retained cybersecurity experts to secure our network and to perform an investigation to determine whether sensitive information was impacted and to whom that information related. Individuals are being notified based on the results of this analysis.
As of this writing, IMPC has not received any reports of misuse of information and/or related identity theft since the date the incident was discovered.
What Information Was Involved
Again, we found no evidence that personal information has been specifically misused. However, the following information may have been potentially exposed to an unauthorized third party: name, driver’s license number, Social Security number, health insurance information and/or medical information. Notably, the types of information affected were different for each individual, and not every individual had all of the above listed elements exposed.
What We Are Doing
Data security is one of our highest priorities. Upon detecting this incident we moved quickly to initiate a response, which included conducting an investigation with the assistance of IT specialists and confirming the security of our network environment. We have also reviewed and enhanced our technical safeguards to prevent a similar incident. The notification letter to the potentially impacted individuals includes steps that they can take to protect their information. To address concerns and mitigate exposure or risk of harm following this incident, IMPC has arranged complimentary credit monitoring and identity theft protection services for all potentially impacted individuals at no cost for a period of 12 months. IMPC recommends that individuals enroll in the services provided and follow the recommendations contained within the notification letter to ensure their information is protected.
For More Information
For individuals seeking more information or questions about this incident, please call 1-877- 344-1591, Monday through Friday, 8:00 a.m. and 8:00 p.m. ET, excluding holidays.
We value the security of the personal data that we maintain, and understand the frustration, concern, and inconvenience that this incident may have caused.