What Is This About?

If you are a current or former patient of Gastroenterology & Hepatology of CNY, your sensitive personal and protected health information may have been exposed in a recent data breach. Our firm is investigating this incident and can help you understand your rights and potential legal options.

What Happened?

On April 14, 2026, the ransomware group known as Exitium claimed to be in possession of patient data obtained via unauthorized access to Gastroenterology & Hepatology of CNY’s systems. The attackers claim to have obtained a database containing patient records relating to approximately 167,303 individuals. The group also claimed it would sell the data if its demands were not met.

The information allegedly taken includes patient medical information as well as Social Security numbers. Gastroenterology & Hepatology of CNY has not yet confirmed the breach, and this matter remains under investigation.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal and protected health information may have been compromised:

• • • • • • • • • • • • Full names;
                      • Social Security numbers;
                      • Home addresses;
                      • Phone numbers; and
                      • Email addresses;
                      • Health information (e.g. medical records, diagnoses, and test results).

The exposed records reportedly include more than one million diagnosis entries and over one million medication records.

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected individuals are entitled to compensation. If you were a current or former patient of Gastroenterology & Hepatology of CNY, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.