Center for Digestive Health reports data breach, sensitive information compromised

The Center for Digestive Health, headquartered in Orlando, Florida, recently disclosed a data breach that compromised the sensitive personal and protected health information of individuals. The breach has raised concerns regarding the security of patient data entrusted to the organization.

On April 11, 2024, the Center for Digestive Health detected suspicious activity within its IT network. In response, the organization immediately launched an investigation, enlisting the support of third-party cybersecurity experts to assess the nature and extent of the incident. The investigation revealed that an unauthorized third party had gained access to and acquired certain files and data stored within the Center’s IT network. Following this discovery, the organization conducted an extensive review to determine the specific individuals and types of information affected.

After months of analysis, the Center for Digestive Health identified on January 22, 2025, that personal and health-related information belonging to certain individuals had been compromised. As part of its response, the organization began mailing notification letters to impacted individuals on February 25, 2025. On March 6, 2025, the breach was officially disclosed to the Maine Attorney General’s Office.

According to available information, the types of data potentially exposed in the breach include names, Social Security numbers, dates of birth, and sensitive health information. The unauthorized access to such personal and medical data poses significant risks, including identity theft, financial fraud, and other malicious activities. The law firm Levi & Korsinsky, LLP has announced an investigation into whether impacted individuals may be entitled to compensation.

Individuals who received notification letters from the Center for Digestive Health regarding this incident are encouraged to take protective measures, such as monitoring their financial accounts, changing passwords, and considering credit monitoring services.