On November 19, 2024, Albany Gastroenterology Consultants (Albany Gastro) discovered unusual activity that disrupted access to one of their systems. This incident was later identified as a data breach that occurred on or about November 10, 2024. An unknown actor accessed and acquired certain personal information without authorization.
The investigation, conducted by an independent digital forensics and incident response firm, revealed that sensitive data was potentially impacted. Albany Gastro completed a comprehensive review of the affected data by January 21, 2025, and promptly began notifying individuals involved.
Information Exposed:
In response to the data breach, Albany Gastro took immediate steps to secure its network environment. They engaged a leading cybersecurity firm to conduct a thorough forensic investigation. The incident was reported to the FBI, and Albany Gastro is cooperating with any resulting investigation.
To assist those affected, Albany Gastro is offering complimentary credit monitoring and identity theft protection services through IDX, a data breach and recovery services expert. These services include 12 or 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services. Affected individuals are encouraged to enroll in these services by April 28, 2025, using the enrollment code provided in their notification letter.
For those affected, it is crucial to remain vigilant by reviewing account statements and monitoring credit reports closely for any errors. If any suspicious activity is detected, individuals should notify their financial institution or a remediation service provider promptly. Additional resources for protecting personal information are available in the notice to consumers.
For further details about this incident, you can view the disclosure on the Vermont Attorney General's website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.