Family Medical Associates of Raleigh Data Breach Exposed Health Information

Family Medical Associates of Raleigh (FMAR), a family medicine primary care practice in Raleigh, North Carolina, disclosed a data breach that affected approximately hundreds of individuals in the United States.

The breach was reported to the U.S. Department of Health and Human Services on July 2, 2026. The company posted a notice of the incident on its website.

On May 7, 2026, FMAR discovered suspicious activity on its systems. An investigation into the incident found that an unauthorized actor intermittently accessed some of the practice's systems between April 18 and April 20, 2026.

The company's investigation found evidence that the unauthorized actor may have downloaded some of the practice's internal data during that period. That data could include individuals' personal information, including protected health information.

The company stated its investigation was still ongoing.

Based on the information available at this time, the types of information potentially exposed included demographic information, contact information, medical and treatment information, health insurance information, financial or payment-related information and government-issued identification numbers. The company also noted that other information maintained in connection with providing services may have been present in the affected systems.

On June 3, 2026, a ransomware group known as Genesis claimed responsibility for the attack, stating it had obtained data from the practice. According to the dark web posting, the compromised data reportedly included healthcare data, personal data, certification data, lists of patients, clinical data, accounting data, operational data, financial data, network users folders and data from the company's file server.

Family Medical Associates of Raleigh's response to the breach

The company encouraged all individuals to remain vigilant against incidents of identity theft and fraud. The company's notice also included specific guidance on how to guard against medical identity theft.

Individuals with questions about the incident can contact the practice by phone at 919-875-8150 or by email at BSuggs@Fmaraleigh.com.