ApolloMD

Profile narrative

ApolloMD (also known as ApolloMD) is a healthcare services provider that manages a network of physicians and medical practices. It is headquartered in the Atlanta metropolitan area, as indicated by its description as an Atlanta‑based healthcare services provider. The organization supplies administrative and operational support to affiliated clinicians, allowing them to concentrate on delivering patient care. It partners with hospitals and health systems to provide staffing solutions, practice management, and related services across various specialties.

In May 2025, ApolloMD experienced a ransomware attack that lasted approximately two days. Threat actors accessed files containing names, addresses, dates of birth, diagnostic details, provider names, dates of service, treatment information, health insurance data, and, for some individuals, Social Security numbers. The Qilin ransomware group claimed responsibility by posting the company on its Tor‑based leak site shortly after the incident. Following the breach, ApolloMD began sending notification letters to affected individuals and offered complimentary credit monitoring services. The U.S. Department of Health and Human Services later confirmed on its data breaches portal that over 626,000 individuals were impacted.

Because ApolloMD handles protected health information on behalf of its physician network, it operates as a business associate under the Health Insurance Portability and Accountability Act (HIPAA). Its core competency lies in practice management rather than direct clinical care, placing it within the healthcare services and health‑IT support sector. The organization’s response to the ransomware incident—providing notices and credit monitoring—reflects compliance with federal breach‑notification requirements. This focus on safeguarding patient data while supporting physician practices distinguishes ApolloMD from pure provider organizations.

The source material does not disclose explicit information about ApolloMD’s ownership, parent company, or subsidiary relationships, so those details are omitted here to avoid speculation.

Incidents

1 incident linked to this organisation.