Notice of a Data Breach

Hypertension-Nephrology Associates discovered an extortion note on Feb 6, 2024 indicating unauthorized access and exfiltration of patient PHI (occurring Jan 20–Feb 6, 2024). A forensic review concluded on Mar 15 but could not determine full scope, so the practice is treating all PHI (including names, DOBs, diagnoses, SSNs, and insurance IDs) as potentially compromised; it engaged cybersecurity and HIPAA counsel, notified regulators and patients, provided a call center, and is offering complimentary credit monitoring with no confirmed misuse reported to date.