IMS Care Center Data Breach Exposes Social Security Numbers

IMS Care Center LLC, a physician-owned, multispecialty medical group based in Phoenix, Arizona, disclosed a data breach involving unauthorized access to its email environment.

The company disclosed the incident to the New Hampshire Attorney General on Oct. 16, 2026, and began mailing affected consumers notification letters on the same date.

On or about June 18, 2026, the company became aware of unusual activity in its email systems. IMS Care Center began an investigation into the scope and nature of the suspicious activity and retained outside cybersecurity experts.

The investigation revealed that certain information contained within the email environment may have been accessed without authorization between June 17, 2026, and June 18, 2026. IMS Care Center then began a comprehensive review of the potentially affected data.

IMS Care Center completed its review of the potentially impacted data on Sept. 30, 2026.

The types of personally identifiable information and protected health information potentially exposed in the breach included names, addresses, Social Security numbers and medical information.

IMS Care Center's response to the breach

IMS Care Center is offering at least 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company.

IMS Care Center is also providing affected individuals with additional guidance, including information on how to place fraud alerts and security freezes on their credit files, how to obtain free credit reports, and how to contact the Federal Trade Commission.

Individuals who do not receive a notification letter but would like to know if they were affected by the breach can call the company's dedicated assistance line at 1-855-474-9436. The line is available Monday through Friday from 8 a.m. to 8 p.m. Eastern time, excluding major U.S. holidays.