New York healthcare provider suffers data breach affecting over 280,000

New York-based Premier Medical Group said a data security incident earlier this year compromised sensitive information of more than 280,000 individuals.

 

headquartered in Poughkeepsie, New York, Premier Medical Group is a physician-owned multi-specialty medical practice that provides medical and surgical care across fields like urology, gastroenterology, cardiology, rheumatology, neurology, podiatry, dermatology, plastic surgery, gynecology, and internal medicine.

 

In a data security incident notice on its website, PMG said it recently detected unauthorised activity on its internal network, disrupting some of its IT systems. The healthcare provider immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected network and notified relevant law enforcement authorities about the incident.

 

“Our investigation determined that an unauthorised party accessed some of the files on PMG’s systems on June 14, 2026,” PMG said.

 

The compromised data included patients’ names, contact information, dates of birth, health insurance information, provider names, internal patient identification numbers, dates of service, medication information, and treatment and/or diagnostic information. The incident was reported to the U.S. Department of Health and Human Services, where PMG said that at least 282,075 individuals were affected.

 

“To help prevent a similar incident, we will continue to implement and evaluate enhanced safeguards and security measures to further protect our systems, and continue to provide security training to our employees,” PMG added.

 

The healthcare provider has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general. 

 

As of publication, no known hacker group had claimed responsibility for the cyberattack on PMG. The healthcare provider also did not disclose who was behind the attack, the amount of data compromised, or whether it had received a ransom demand.