Allentown, Pa. – October 06, 2026 -- Secure Healthcare Information Management, LLC (SHIM), a billing and medical management company serving independent physicians and medical institutions in Northeastern Pennsylvania, has notified individuals that their personal and health information may have been exposed in a data security incident.
An unknown actor accessed files between July 6 and July 16, 2026
SHIM experienced a network disruption on July 17, 2026, and immediately launched an investigation with cybersecurity experts. That probe found an unauthorized actor had accessed or acquired certain personal information during the ten-day window. SHIM confirmed the full scope of the breach on September 18, 2026.
Exposed data may include Social Security numbers and medical records
The information potentially compromised includes names, dates of birth, Social Security numbers, driver's license or state ID numbers, medical information, and health insurance details.
Notification letters went out October 6, 2026
SHIM mailed notices to all individuals for whom it had identifiable addresses, detailing the incident and steps recipients can take to protect their data. The company also reported the breach to the U.S. Health and Human Services Office for Civil Rights and to consumer reporting agencies, and says it has implemented additional safeguards to prevent similar incidents.
Affected individuals can enroll in free identity protection through January 4, 2027
Eligible individuals may sign up for complimentary identity protection services via Cyberscout, a TransUnion company specializing in fraud assistance and remediation. SHIM has set up a toll-free call center at 1-833-516-7420, open Monday through Friday from 8:00 a.m. to 8:00 p.m. Eastern Time, excluding major U.S. holidays. Those who did not receive a letter must verify their eligibility through the call center before enrolling. The deadline to sign up for the free services is January 4, 2027.