Heritage Pediatrics Data Breach Exposed Protected Health Information and More

Heritage Pediatrics PLLC, a pediatric medical practice in San Antonio, Texas, disclosed a data breach that occurred in April 2026.

On or about Apr. 12 or 13, 2026, Heritage Pediatrics experienced a data security incident involving its email environment. After learning of the issue, Heritage Pediatrics began an investigation with external cybersecurity professionals experienced in handling these types of incidents.

The incident potentially exposed a wide range of sensitive personal and health information.

Personally identifiable information that may have been involved includes full names, Social Security numbers, dates of birth, driver's license or state identification numbers, passport numbers, financial account information and debit or credit card information.

In addition, protected health information may have been exposed, including health insurance information, clinical information, diagnosis information, treatment information, medical codes for treatment or procedures, medical record numbers, HIPAA contact information and health insurance policy numbers.

The breach was reported to the Texas Attorney General on Oct. 20, 2026, with 2,876 Texas residents identified as affected. The practice also posted a notice on its website and began mailing notification letters on Oct. 19, 2026.

Heritage Pediatrics' response to the breach

Heritage Pediatrics has set up a dedicated toll-free response line at 1-800-664-7051 for individuals who have questions about the incident or who want to find out if they were affected. The line is available Monday through Friday, 8 a.m. to 8 p.m. Eastern Time, excluding U.S. holidays.

The company also directed individuals to general practices that can help prevent medical identity theft. These include protecting documents that contain medical information, reviewing medical records and Explanation of Benefits statements for errors or services not received, and reporting any suspicious activity to healthcare providers.