A heart attack letter from the police is informal slang for an unexpected piece of formal legal mail that demands your attention: usually a subpoena, a search warrant, a court order, or a letter telling you that you are the target of an investigation. The nickname captures the jolt of opening the envelope. The document itself follows well-established procedure, and what you should do next depends entirely on which of these four things you are actually holding.
What the Phrase Actually Means
No statute uses the term. “Heart attack letter” is shorthand used by officers, attorneys, and more recently popular culture for any official correspondence from a police department, prosecutor’s office, or federal agency that arrives without warning. What ties the examples together is surprise, not legal category. The recipient, whether an individual, a hospital, a phone carrier, or a small business, learns that law enforcement wants something: testimony, records, data, or just their awareness that they are being looked at.
Because the label covers very different instruments, the first job after you open the envelope is identifying which one you received. The authority behind each is different, and so are your obligations.
The Four Documents People Call a Heart Attack Letter
Search Warrant
A warrant is the strongest of the four. Under the Fourth Amendment, a judge must find probable cause before issuing one, and the warrant has to describe specifically what will be searched and what is being sought.1Legal Information Institute (LII) / Cornell Law School. Fourth Amendment Warrants are also the required tool when law enforcement wants the content of electronic communications stored for 180 days or less, such as recent emails or texts held by a service provider.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records
Subpoena
A subpoena can order you to appear and testify, or to produce documents, records, data, or other items. Under Federal Rule of Criminal Procedure 17, it must name the issuing court and state when and where you have to comply.3Legal Information Institute. Federal Rules of Criminal Procedure Rule 17 – Subpoena A grand jury subpoena carries direct contempt authority, so a court can sanction you right away if you refuse. Administrative subpoenas from agencies like the DEA work differently: the agency has to go to court for an enforcement order before any penalty attaches.
Court Order
A court order sits between a subpoena and a warrant. To get certain non-content records from communications providers, like account activity or transactional data, law enforcement can seek an order by showing that the records are relevant and material to an ongoing investigation.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records The showing is lower than probable cause but higher than a bare subpoena.
Target Letter
A target letter is the purest example of why the nickname exists. Federal prosecutors send one when they believe there is substantial evidence that you have committed a crime and the grand jury is looking at you. It is different from being a “subject,” which means your conduct falls within the investigation’s scope without charges necessarily being near. A target letter does not compel you to do anything. It signals that an indictment may be close and that your window to engage with prosecutors through counsel is closing.
What the Request Can Reach
What police can demand depends on both the instrument and the type of information. A few categories come up repeatedly.
Medical records show up often in assault, overdose, suspicious death, and accident investigations: diagnoses, treatment history, lab results, billing records, dates and times of care. A subpoena for medical records has to be specific, limited in scope, and seek information relevant and material to the inquiry.4eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required
Electronic records from phone, email, and internet providers are tiered. Basic subscriber information (name, address, billing, length of service) can be obtained by subpoena. Transactional records like email correspondents or IP addresses visited require a court order. The actual contents of messages stored 180 days or less require a warrant.2Office of the Law Revision Counsel. 18 U.S. Code 2703 – Required Disclosure of Customer Communications or Records
When police are trying to locate a suspect, fugitive, witness, or missing person, they can request a limited set of identifiers from a provider: name, address, date of birth, Social Security number, blood type, physical description, and the type and timing of any injuries treated. DNA records, dental records, and tissue samples are not covered by that narrow exception and require a higher level of legal authority.4eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required
If You Are a Healthcare Provider
HIPAA does not let a hospital or clinic simply hand records over because an officer asks. The Privacy Rule permits disclosure to law enforcement without patient consent only in defined situations, including a valid court order, warrant, or qualifying subpoena; a request for limited identifying information to locate a person; disclosures involving crime victims under specific conditions; suspected criminal cause of death; evidence of a crime that occurred on the premises; and alerts from off-site emergency responders about criminal activity.5HHS.gov. Summary of the HIPAA Privacy Rule
For an administrative request that does not come with a court order or warrant, the request itself must include a written statement that the information is relevant and material, specific and limited in scope, and that de-identified data would not serve the purpose.4eCFR. 45 CFR 164.512 – Uses and Disclosures for Which an Authorization or Opportunity to Agree or Object Is Not Required A provider can rely on the official’s representation about what the minimum necessary is, but the provider still gets to make its own call on scope.6HHS.gov. Minimum Necessary Requirement There is also an emergency exception for disclosures necessary to prevent or lessen a serious and imminent threat, and it is deliberately narrow.5HHS.gov. Summary of the HIPAA Privacy Rule
What to Do After You Open It
Read the document first. Identify the type of instrument, the issuing court or agency, exactly what it demands, and the deadline. For federal document subpoenas, you generally have 14 days after service, or until the compliance date stated in the subpoena, whichever is earlier, to serve a written objection.7Legal Information Institute (LII) at Cornell Law School. Rule 45 – Subpoena Miss that window and the right to object can be forfeited.
Then call an attorney before you respond to anything. This matters most with a target letter, where talking to prosecutors on your own can seriously damage your position. Do not try to explain yourself, do not throw out or alter documents, and do not discuss the investigation with people around you. Counsel can contact the prosecutor’s office, judge whether cooperation or a legal fight is the better path, and keep you from giving away ground you cannot recover.
If you are a provider receiving the request, verify that the instrument is properly issued and that the request fits within what HIPAA allows. Over-producing creates liability. So does refusing a lawful order. Narrowing the response to what the request actually describes is usually the safer middle.
Pushing Back on the Request
A subpoena or order is not the final word. Under federal civil and criminal procedure, you can file a motion to quash or modify a subpoena if compliance would be unreasonable or oppressive.3Legal Information Institute. Federal Rules of Criminal Procedure Rule 17 – Subpoena Typical grounds include requests that sweep too broadly, that are not tied closely enough to the investigation, or that reach privileged material like attorney-client communications or protected medical information.
Timing matters. Courts have little patience for recipients who sit on a subpoena for weeks and then complain the day before compliance is due. Often the quickest result comes from negotiating a narrower scope with the issuing party rather than going to the judge.
What Happens If You Ignore It
Doing nothing is almost always the worst option. A person who fails to comply with a valid federal subpoena without adequate excuse can be held in contempt.7Legal Information Institute (LII) at Cornell Law School. Rule 45 – Subpoena Federal courts have broad authority to punish contempt by fine, imprisonment, or both.8Office of the Law Revision Counsel. 18 U.S. Code 401 – Power of Court The court can also award lost earnings and reasonable attorney’s fees to the party that had to enforce the subpoena.
A target letter is different. It does not force you to act, but ignoring it does not pause the investigation either. It generally speeds the move toward indictment because prosecutors read silence as refusal to engage. The chance to present exculpatory evidence, negotiate, or explore alternatives to prosecution gets smaller once that impression takes hold.
Providers carry risk in both directions. Releasing records on a request that does not meet HIPAA’s requirements can bring civil and criminal penalties. Refusing a properly authorized demand can bring contempt. Verifying the legal basis before acting is not optional.