Notice of Medfinancial Security Incident
Huntsville Hospital Health System and DeKalb Regional Medical Center are committed to protecting the confidentiality and security of its patients’ information.
Medfinancial, which provides billing statement and patient account communication services on behalf of DeKalb Regional Medical Center, notified us that on September 10, 2026, Medfinancial discovered that human error caused incorrect information to be printed on certain paper billing statements. The error occurred between September 1 and September 7, 2026, and Medfinancial has mailed a letter to notify all effected.
There was no unauthorized access to either Medfinancial’s or DeKalb Regional Medical Center’s systems or patient records, including patient portals or patient accounts, and the incident did not affect the accuracy of medical records.
What Information Was Involved?
The information involved in this incident included:
- First name and last name;
- DeKalb Regional Medical Center account number; and
- Amount owed.
Due to the error, this information was printed on a billing statement that was mailed to another patient. In addition, the recipient may have received a text message displaying only first name and no other information.
This incident did not involve any other personally identifying information, such as Social Security number or payment card information. It also did not involve any additional protected health information, such as information contained in patients’ medical records, or involve access to patient portals or patient accounts.
What Is Being Done to Fix This?
A corrected billing statement is being sent to effected patients along with a letter. We have corrected the error and are implementing additional measures designed to help prevent similar incidents from occurring in the future.
At this time, no action is required.
For More Information
If you have questions, please contact Medfinancial at 256-801-2508 Monday through Friday from 8 a.m. to 5 p.m. Central Time excluding major U.S. holidays.
FAQs
Medfinancial provides billing statement and patient account communication services on behalf of DeKalb Regional Medical Center.
We recently identified that Medfinancial’s human error caused certain paper billing statements to contain the incorrect first and last name, DeKalb Regional Medical Center internal account number and amount owed. It also caused related text messages to show the wrong first name. We sincerely apologize for the confusion and inconvenience this may have caused. Our vendor has corrected the issue and are implementing measures designed to help prevent similar incidents in the future.
No. This incident resulted from human error and was not caused by a cyberattack, hacking incident, malware, or other unauthorized access to Medfinancial’s or DeKalb Regional Medical Center’s systems. The incident involved incorrect information appearing on certain paper billing statements.
No. There was no unauthorized access to Medfinancial’s or DeKalb Regional Medical Center’s systems. The incident resulted from human error involving paper billing statements and related text communications.
The information involved in this incident included your first and last name, DeKalb Regional Medical Center account number, and amount owed. The incident did not involve your Social Security number, payment card information, information from your medical record, or access to your patient portal or patient account.
The incorrect billing statement included your first name, last name, DeKalb Regional Medical Center account number, and amount owed.
The incident did not involve your Social Security number, payment card information, information contained in your medical record, or access to your patient portal or patient account.
No. The incident did not affect the accuracy of your medical record and did not involve unauthorized access to your medical record.
No. The incident did not involve unauthorized access to your patient portal or patient account.
No. The incident did not involve Social Security numbers.
No. The incident did not involve payment card information.
No. The incident did not involve information contained in your medical record.
Due to the error, another individual may have received a text message displaying your first name.
No. Please do not pay the amount listed on the incorrectly mailed statement. Medfinancial has placed a temporary hold on all affected accounts so that no collection activity or due dates relating to these particular billed services will be enforced while the issue is being corrected.
If, after receiving your corrected billing statement, you believe the amount owed is incorrect or have questions about the charges, please contact Medfinancial at 256-801-2508. A representative will review your account and assist you through the normal billing inquiry process.
Until you receive your corrected billing statement, please do not make payment based on the incorrectly mailed statement.
Medfinancial is auditing and updating all affected statements as quickly as possible. You will receive a corrected billing statement along with a letter explaining the error.
If you received a notification letter regarding this incident, our records indicate that your information may have been involved.
If you received billing information that does not belong to you, please securely destroy or dispose of the information.
Based on our investigation, the incident did not involve Social Security numbers, payment card information, or access to patient accounts. At this time, no action is required on your part.
We are notifying individuals whose information may have been involved in this incident. We do not have any additional information to provide regarding the number of individuals affected.
At this time, no action is required on your part. Once you receive your corrected billing statement, you may review it and contact us if you have any additional questions.
No. There was no unauthorized access to either Medfinancial’s or DeKalb Regional Medical Center’s systems. The incident resulted from human error involving certain paper billing statements and related communications.