Hypertension-Nephrology Associates, P.C. Data Breach

Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the Hypertension-Nephrology Associates data breach.

As part of their investigation, they need to hear from individuals who received a notice stating they were impacted.

Hypertension-Nephrology Associates, a Pennsylvania medical practice offering treatment for kidney disease and hypertension, released a statement earlier this month announcing that it was the target of an extortion attack.

“In an extortion attack, cybercriminals gain unauthorized access to a victim’s sensitive information, such as protected health information (PHI), and then threaten to disclose the PHI unless a ransom is paid,” the statement reads.

Around February 6, 2024, Hypertension-Nephrology Associates discovered a ransom note on its computer system. A forensic investigation revealed that between January 20 and February 6, 2024, cybercriminals accessed its network and exfiltrated information belonging to current and former patients. The compromised information may include full names, dates of birth, diagnosis and treatment information, Social Security numbers, and health insurance identification numbers.

The Hypertension-Nephrology Associates data breach impacted 39,491 individuals, according to a report submitted to the U.S. Department of Health and Human Services. The company is mailing notification letters to all potentially affected individuals.

If your information was exposed in the breach, attorneys want to hear from you. You may be able to start a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more.

A successful case could also force Hypertension-Nephrology Associates to ensure it takes proper steps to protect the information it was entrusted with.