Community Health Action of Staten Island Data Breach Lawsuit Investigation

Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Community Health Action of Staten Island data breach.

If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.

About Community Health Action of Staten Island

Community Health Action of Staten Island is a nonprofit organization based in Staten Island, New York. Founded in 1988, the organization originally began as the Staten Island AIDS Task Force to address the impact of AIDS on the local community.

Community Health Action of Staten Island offers a variety of programs including HIV services, food pantry support, benefits assistance, domestic violence counseling, harm reduction, and recovery services.

What Happened?

Community Health Action of Staten Island experienced a ransomware attack by a group known as GENESIS.

On Feb. 13, 2026, GENESIS posted on the dark web claiming to have obtained extensive data from the organization, including databases with over 60,000 records of HIV tested patients, personal data, HIPAA-related data, financial information, contracts, HR data, and more. The group threatened to publish the stolen data within days.

On Feb. 24, 2026, the organization disclosed the breach to the Massachusetts Attorney General. According to the official notice, the following types of consumer information were exposed:

Information Exposed:

• Drivers licenses
• Financial account numbers
• Social Security numbers
• Bank account and routing numbers
• Driver’s license numbers
• Health insurance information
• Medical information
• Names
• Non-driver identification card numbers

The breach affected at least two individuals in Massachusetts, with the total number of affected individuals undisclosed at this time.

You May Be Entitled to Compensation

If your personal information was exposed in this data breach, you may have legal rights to compensation. Lawyers are ready to help individuals who have been affected by this incident. By joining a class action lawsuit, you can seek compensation for any harm or inconvenience caused by the exposure of your sensitive information.

To find out if you qualify and to take the next step, complete the below form to join the lawsuit investigation.

Sources

• Massachusetts Attorney General
• Dark web