Glendale Obstetrics & Gynecology Data Breach Exposes Patient Data

Glendale Obstetrics & Gynecology, an all-female OB/GYN practice based in Glendale, Arizona, disclosed a data breach involving sensitive patient information. The practice provides comprehensive women's healthcare and serves patients across the West Valley of Arizona.

The breach was disclosed to the U.S. Department of Health and Human Services on Dec. 24, 2025. It was also reported to the attorneys general of Massachusetts, Montana and New Hampshire.

The practice discovered the breach on Oct. 25, 2025, and completed its review of affected individuals on March 16, 2026.

The practice identified a network disruption affecting a portion of its digital environment. It took steps to secure its systems and launched an investigation to determine the nature and scope of the incident.

The investigation found that certain files had been acquired by an unauthorized individual. On Nov. 11, 2025, a ransomware group known as Safepay posted a claim on a Tor dark web network stating it had obtained the organization's data.

The practice then reviewed the compromised files to identify what information they contained and which individuals were affected.

The types of information exposed included names, Social Security numbers, medical records, financial account information, driver's licenses and credit or debit card numbers.

Glendale Obstetrics & Gynecology's response

The practice is offering affected individuals 12 months of free credit monitoring, credit report and credit score services through Cyberscout, a TransUnion company.

The practice is also offering proactive fraud assistance to help individuals who have questions or who become victims of fraud. Affected individuals received a notification letter containing a unique enrollment code needed to access these services.

A dedicated call center has been set up to assist those with questions about the incident. Cyberscout representatives can be reached at 1-833-289-6054 from 5 a.m. to 5 p.m. Pacific time, Monday through Friday, excluding U.S. holidays. Representatives will be available for 90 days from the date of each individual's notification letter.