The Mount Kisco Surgery Center LLC data breach (2024)

NEW YORKHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Jun 25, 2024bd_d25e9f8730294417

The Mount Kisco Surgery Center LLC d/b/a The Ambulatory Surgery Center of Westchester (NY) reported a hacking/IT incident to HHS on 2024-06-25 affecting 22,139 individuals. Breached PHI was located in email and included names, SSNs, driver's license/state ID numbers, dates of birth, diagnoses, medications, claims, financial information, and health insurance/treatment information. The responsible employee was sanctioned and complimentary credit monitoring was provided.

Affected (this filing): 22,139

🍁Vermont State AG

🏎️Indiana State AGlinked via same-victim cross-source · 100%

Filed Jun 26, 2024bd_98faef4f7fe7242f

The Mount Kisco Surgery Center LLC dba the Ambulatory Surgery Center of Westches reported a data breach to the Indiana Attorney General. The breach occurred on 2023-10-23 and was reported on 2024-06-26. 3 Indiana residents were affected. 21,073 individuals affected in total.

Affected (this filing): 21,073

⛰️New Hampshire State AGlinked via same-victim cross-source · 100%

Filed Jun 26, 2024bd_9a8fe933940dea3e

The Mount Kisco Surgery Center LLC (dba ASCW) notified the NH AG of a data security incident. On Nov 3, 2023, unusual activity was discovered in an employee's email account. Unauthorized access occurred between Oct 23 and Nov 3, 2023. The incident involved phishing leading to credential compromise and email collection. Personal and PHI of 21,073 individuals were potentially affected, including 19 NH residents. ASCW engaged forensic investigators, secured the account, and offered identity protection services.

Affected (this filing): 21,073

The Mount Kisco Surgery Center LLC

Litigation Timing

Sensitive data

Affected residents by state

Timeline