Rosch Visionary Systems Data Breach Exposes PHI

Rosch Visionary Systems Inc., a small software company based in Altoona, Pennsylvania, disclosed a data breach that affected individuals in the United States.

The company specializes in allergy and immunotherapy management software for medical practices. Its software is used by practices across the United States and Canada to automate allergy shot room processes and manage sensitive health-related data.

Because Rosch Visionary Systems operates as a third-party software vendor for allergy medical practices, the individuals affected by the breach are patients of those practices whose personal or health information was stored in or processed through the company's systems.

Specifically, the incident impacted individuals associated with Texas Regional Asthma, Allergy & Immunology Center and Allergy, Asthma & Sinus Care Center.

Rosch detected a compromise to a portion of its network environment that could have affected compromised personal or health information of individuals.

On Jan. 30, 2026, a ransomware group known as LYNX publicly claimed responsibility for the attack. The group posted on the Tor dark web network, claiming to have obtained data belonging to Rosch Visionary Systems.

The company's notification did not specify exactly when the breach occurred or when it was first discovered.

The specific types of personal or health information that may have been exposed as a result of the incident varied by medical practices and individuals but included names, medical information, addresses,

The breach was reported to the U.S. Department of Health and Human Services on March 23, 2026.

Rosch Visionary Systems' response to the breach

The company is offering affected individuals 24 months of free credit monitoring services and proactive fraud assistance.

To enroll in the free credit monitoring, affected individuals were instructed to visit a dedicated enrollment website and enter a unique code included in their notification letter. Enrollment had to be completed within 90 days from the date of the letter.

Rosch Visionary Systems also established a dedicated phone line for individuals who have questions about the incident. The phone line is available Monday through Friday between 8 a.m. and 5 p.m. Central Time, excluding major U.S. holidays.