Threat Intelligence Brief
Curated summary with source attribution
Source: classaction.org
Threat Risk: Medium
Victim: Gastroenterology & Hepatology of Central New York
Incident: Unauthorized access to and acquisition of patient records containing PII and PHI.
Impact: Exposure of names, Social Security numbers, and medical record numbers for an undisclosed number of patients.
Attacker: Unidentified threat actors
Analysis: The incident involved unauthorized access to records containing personal and protected health information (PHI). There was a significant delay between the initial breach in March 2026 and the confirmation of data theft in August. The exposure of SSNs and medical record numbers increases the risk of identity theft and targeted fraud for the affected patients.
Recommendations: Monitor credit reports and financial statements for unauthorized activity; Enable multi-factor authentication on all healthcare and financial portals; Be vigilant against phishing attempts using leaked personal details
Source: ClassAction.org
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source