Millcreek Pediatrics reports data breach affecting more than 14,000 individuals

Millcreek Pediatrics, a pediatric medical practice based in Wilmington, Delaware, has disclosed a data security incident involving the protected health information of 14,095 individuals after detecting unauthorized access to its network in late February.

The practice identified suspicious activity on or around February 25, 2025. A digital forensics firm engaged to investigate the intrusion confirmed that an unauthorized party accessed the network between February 17 and February 25. Subsequent file analysis completed on October 27 determined that multiple categories of protected health information had been exposed.

The compromised data included full names, birth dates, medical record numbers, patient identification numbers, driver’s license or state identification numbers, dates of service, healthcare claims information, provider details, and clinical or treatment information. A limited number of affected individuals also had their Social Security numbers disclosed.

Notification letters began reaching patients on November 21. Individuals whose Social Security numbers were involved have been offered complimentary credit monitoring services. The practice stated that it is reviewing and updating its privacy and data security protocols to strengthen safeguards and reduce the risk of future incidents.

Millcreek Pediatrics also confirmed that personally identifiable information and protected health information may have been acquired during the period of unauthorized access. The data potentially exposed aligns with the categories identified in the forensic review.

The law firm Lynch Carpenter LLP has initiated an investigation into potential claims related to the breach involving the pediatric provider, and individuals seeking a case review have been directed to the firm’s website.

Millcreek Pediatrics reported the incident to the U.S. Department of Health and Human Services Office for Civil Rights and said it will continue efforts to enhance system protections as remediation work progresses.