Medical Supply Firm Fieldtex Hit by Data Breach Affecting Hundreds of Thousands

Fieldtex, a New York–based medical supply fulfillment company, revealed that a major data breach earlier this year compromised the personal information of its customers.

 

Fieldtex Products, Inc. is a U.S.-based manufacturer and distributor of medical and safety products, producing custom soft-sided cases and first-aid supplies for medical, military, and industrial customers.

 

In a data security incident notice published on its website, Fieldtex said that on August 19, it identified unauthorised access within its internal network. The company immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the same.

 

“Following a thorough investigation, Fieldtex confirmed that a limited amount of protected health information may have been impacted in connection with this incident,” the company said.

 

The compromised data included names, addresses, dates of birth, insurance member identification numbers, plan names, effective terms, and gender. the incident was reported with the U.S. Department of Health and Human Services Office for Civil Rights where Fieldtex said it has identified at least 274,363 individuals affected by the incident.

 

“On September 30, 2025, Fieldtex finalised its analysis of the potentially impacted data and immediately began notifying the corresponding health plans.

 

“Additionally, in response to this incident, Fieldtex has implemented additional security measures within its network and is reviewing its current policies and procedures related to data security,” the company added.

 

While Fieldtex found no evidence of the compromise data being misused, it has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

 

 

 

On November 5, the Akira ransomware group claimed responsibility for a cyber attack on Fieldtex, listing the company as a victim on its data leak site. The group claimed it exfiltrated 14 GB of corporate data from E-First Aid Supplies, a Fieldtex-owned brand, including documents containing employee, customer, and financial information.