2026 Associated Endocrinologists — cybersecurity incident; 4,979 patients (HHS OCR); RansomHouse claimed
Data compromised
Patient personal/health information (specific field list not detailed in HIPAA Journal summary at indexing)
Technical writeup
Verified HHS OCR listing and patient notifications summarized by HIPAA Journal — September 3, 2026. Associated Endocrinologists (Farmington Hills and Clarkston, Michigan) began notifying 4,979 patients about a cybersecurity incident reported to HHS OCR on July 29, 2026. Public substitute notice details were limited at indexing; RansomHouse previously claimed responsibility on its leak site, saying data was exfiltrated and files encrypted on January 31, 2025. recordsAffected 4979 from OCR/notification census via HIPAA Journal; companyConfirmed true for the notified incident.
Root cause
Cybersecurity incident reported to HHS OCR July 29, 2026; RansomHouse claimed January 31, 2025 encryption/exfiltration — company notifying patients