Albany ENT & Allergy Services, PC.

Albany ENT & Allergy Services, PC (AENT), a healthcare provider specializing in ear, nose, and throat issues as well as allergy treatment and diagnosis, experienced a significant data breach affecting over 224,486 individuals across the United States. The breach occurred between March 23, 2023, and April 4, 2023, with AENT discovering suspicious activity on its computer network on March 27, 2023. Despite efforts to secure the network, unauthorized access continued until April 4, 2023. A comprehensive review identified that certain employee and patient information was compromised, including full names, Social Security numbers, financial account information, and health insurance information[1].

In response to the breach, AENT has offered one year of free credit monitoring and identity theft restoration services to the victims. The breach notification letters were sent out on May 25, 2023, informing affected individuals of the exposure of their Personally Identifiable Information (PII) and advising them on steps to protect themselves from potential identity theft and fraud[1].

Two ransomware groups, RansomHouse and another unnamed group, claimed responsibility for the attack on AENT’s systems. RansomHouse listed AENT on their leak site on April 28, claiming to have locked AENT’s systems on March 27[2].

Legal firms and data breach specialists have issued alerts and are investigating claims on behalf of the victims of the breach. They are exploring potential legal remedies for those affected by the unauthorized access and exposure of their sensitive personal information[3][5][8][11].

AENT operates in Albany and Clifton Park, New York, employing more than 88 people and generating approximately $21 million in annual revenue. The breach has raised concerns about the security of patient information and the potential legal and financial implications for the healthcare provider[1][5].

For individuals affected by the breach, it is recommended to remain vigilant by monitoring account statements, credit reports, and utilizing the offered credit monitoring services. Additionally, they should consider changing passwords and security questions for online accounts to further protect against identity theft and fraud[1][8].

Citations:

1. https://www.justice4you.com/blog/albany-ent-allergy-services-pc-data-breach.html
2. https://www.databreaches.net/two-ransomware-groups-claimed-to-have-attacked-albany-ent-allergy-services-and-leaked-data-but-aent-doesnt-mention-that-at-all-in-their-notification/
3. https://www.prnewswire.com/news-releases/albany-ent–allergy-services-data-breach-alert-issued-by-wolf-haldenstein-adler-freeman–herz-llp-301836904.html
4. https://www.timesunion.com/business/article/albany-ent-allergy-albany-clifton-park-hit-18127448.php
5. https://www.myinjuryattorney.com/albany-ent-allergy-services-data-breach-alert/
6. https://www.jdsupra.com/legalnews/albany-ent-allergy-services-notified-4794704/
7. https://apps.web.maine.gov/online/aeviewer/ME/40/8b528710-697c-4164-945d-d710b8409ec5.shtml
8. https://www.turkestrauss.com/2023/05/30/albany-ent-allergy-services-data-breach-investigation/
9. https://www.businesswire.com/news/home/20230525005913/en/Albany-ENT-Allergy-Services-PC.-%E2%80%9CAENT%E2%80%9D-NOTICE-OF-DATA-EVENT
10. https://albanyentandallergy.com/hipaa-statement/
11. https://www.msdlegal.com/blog/2023/05/albany-ent-allergy-services-pc-data-breach-class-action-investigation/