American Medical Association

The American Medical Association operates an online healthcare professional directory service serving the United States medical community. This platform functions as a centralized repository for verified information on licensed physicians and medical practitioners across the country. Its core service involves maintaining and providing access to professional profiles that include full names, genders, hospital affiliations, practice addresses, phone numbers, and medical license numbers. The directory serves as a critical resource for patients, healthcare institutions, and other professionals seeking to verify credentials or establish contact within the U.S. medical sector. The scale of this operation is evidenced by the approximately 1.41 million individual records contained within its database at the time of a major security incident, indicating a substantial footprint covering a significant majority of practicing doctors in the United States. The service's value proposition rests on the comprehensiveness and accuracy of its data, making it a widely referenced tool for professional lookup and verification within the American healthcare ecosystem.

The organization's distinguishing attribute is its role as a trusted custodian of highly sensitive professional data for a critical national workforce. The 2020 breach of its directory underscored the specific risks associated with aggregating such detailed, non-medical personal information for a large, identifiable professional group. Security analysts highlighted that the stolen data's granularity—including precise practice locations and license numbers—created acute vulnerabilities for doctors, particularly during the COVID-19 pandemic. This exposure facilitated sophisticated social engineering threats like targeted phishing and smishing campaigns, and could enable disinformation operations or ransomware attacks aimed at disrupting healthcare delivery. The incident demonstrated the directory's dual nature as both an essential professional utility and a high-value target for cybercriminals seeking to exploit the healthcare sector's reliance on accurate contact and credentialing information. The breach's impact was magnified by the targeted victim profile—U.S. physicians—whose compromised details could be weaponized to undermine pandemic response efforts and personal security.