On May 8, 2025, Tri-City Cardiology Consultants, P.C., an Arizona-based practice, disclosed a data breach to the U.S. Department of Health and Human Services. According to the official report, the breach affected 22,753 individuals in the United States. While the exact method of the breach and the identity of those responsible have not been publicly detailed, the incident involved unauthorized access to sensitive patient data.
The scale of the incident and the type of data involved make this a serious event, particularly given the sensitivity of medical information.
Following the discovery of the breach, Tri-City Cardiology Consultants, P.C. took steps to contain the incident and assess the potential impact on patients. The organization has notified affected individuals as required by law and is cooperating with authorities to investigate the breach.
If you believe your information may have been involved, consider the following actions:
For more information about the organization, visit the Tri-City Cardiology website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.