Central New York Cardiology Data Breach Exposes PHI & PII

On Dec. 26, 2024, Central New York Cardiology detected unusual activity on its network, prompting an immediate investigation with the help of third-party cybersecurity specialists. The investigation revealed that an unauthorized individual gained access to certain parts of the company’s network between Dec. 26 and Dec. 30, 2024. During this period, sensitive information was acquired by the intruder.

The breach was significant in scope, as it potentially exposed a wide range of both personally identifiable information (PII) and protected health information (PHI). The information at risk included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, diagnosis or condition details, health insurance information, provider names, treatment information and financial account information. For some individuals, multiple data elements may have been involved.

Central New York Cardiology’s investigation into the full extent of the breach is ongoing. As of July 29, 2025, the company has confirmed that at least 21 Massachusetts residents were affected, with additional individuals impacted in other states.

The company has posted a detailed notice for patients and the public on its website. Additional details about the breach are available in the Massachusetts Attorney General’s disclosure, the Vermont Attorney General’s disclosure and the U.S. Department of Health and Human Services breach portal.

Central New York Cardiology's response

For those affected, the company is offering complimentary credit monitoring and identity protection services for up to twenty-four months. Impacted individuals have been or will be contacted directly with instructions on how to enroll in these services. The company encourages everyone who may have been affected to remain vigilant by regularly reviewing account statements, credit reports and explanation of benefits forms for any unauthorized or suspicious activity.

Affected individuals are advised to:

• Enroll in the free credit monitoring and identity protection services provided by Central New York Cardiology
• Obtain a free credit report annually from each of the three major credit bureaus at www.annualcreditreport.com
• Consider placing a fraud alert or credit freeze on their credit files
• Report any suspicious activity to financial institutions, law enforcement and the Federal Trade Commission

A dedicated assistance line is available at 877-423-1434, Monday through Friday from 9 a.m. to 9 p.m. Eastern time, for anyone with questions or concerns regarding the breach.