DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedData ExfiltratedPHIIdentity (basic)Government IDMediumContained

Gastroenterology & Hepatology of Central New York, P.C.

bd_fef82cc3cccbea10 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 6, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

67state residents only

Linked

2 filings

Confidence

67%
Full breach record for Gastroenterology & Hepatology of Central New York, P.C. →

Gastroenterology & Hepatology of Central New York, P.C. experienced a data security incident on March 6, 2026, where an unauthorized party accessed network systems. The organization contained the threat and notified law enforcement. A forensic investigation determined that personal and protected health information (PHI), including names and potentially SSNs, was acquired by the unauthorized party. The company is offering complimentary identity protection services to affected individuals.

Incident timeline

Mar 6, 2026

Begins

Mar 6, 2026

Discovered

Sep 1, 2026

Filed

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Massachusetts State AGSep 1 · first · this page

Pattern: first filing Sep 1 (MA), last Sep 23 (NH) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.