2025 Tri-Cities Gastroenterology - network file theft exposed PHI for 67,115 individuals
Data compromised
Full names, SSNs, dates of birth, addresses, email addresses, telephone numbers, gender, and medical record numbers
Technical writeup
Tri-Cities Gastroenterology disclosed unauthorized access on or about December 11, 2025, during which files were removed from its network. A forensic investigation determined around April 22, 2026 that the removed files contained protected health information for 67,115 individuals. The practice began notifications and filed state disclosures on April 29, 2026.
Root cause
Unauthorized third-party access to network and file exfiltration