Three Healthcare Providers Report Patient Data Incidents
Summary
Three healthcare providers reported patient-data incidents: Carolina Foot & Ankle confirmed network access and file exfiltration; New Age Dermatology reported ransomware disrupting a server; Marin Cancer Care later confirmed file exfiltration. Some data details remain未知
Key points
- Carolina Foot & Ankle Associates detected a network disruption on December 8, 2025; investigators confirmed unauthorized network access and exfiltration of files containing patient data.
- Carolina said affected data included names, contact details, dates of birth, medical record numbers, insurance information, diagnostic/CPT codes, and service dates. It said Social Security numbers, financial information, and its electronic medical record system were not compromised.
- New Age Dermatology reported a ransomware attack identified around December 20, 2025, that left an internal server inoperable and inaccessible. The data involved and number of affected individuals remain undetermined; the practice said no ransomware group had claimed responsibility.
- New Age said personal and health information, potentially including Social Security numbers, may have been compromised, but it had found no evidence that its electronic medical record system was affected.
- Marin Cancer Care reported unauthorized network access between November 22 and December 6, 2025. An April 2026 update confirmed files were exfiltrated; names, medical information, and health insurance information were likely involved.
- The providers notified law enforcement or relevant authorities and offered affected individuals identity-protection or credit-monitoring services; investigations or reviews were ongoing for some incidents.
Article Details
- Victim Organization
- Carolina Foot & Ankle Associates; New Age Dermatology LLC; Marin Cancer Care
- Incident Type
- Cyber incidents involving unauthorized network access and patient-data exposure or exfiltration at Carolina Foot & Ankle Associates and Marin Cancer Care; a reported ransomware attack affecting an internal server at New Age Dermatology.
- Incident Date
- 2025-11-22
- Data Types Exposed
- Names
- Phone numbers
- Dates of birth
- Medical record numbers
- Health insurance information
- Diagnostic/CPT codes
- Dates of service
- Medical and treatment information
- Diagnostic images
- Photographs
- Social Security numbers
- Affected Records
- Carolina Foot & Ankle Associates reported a placeholder estimate of at least 501 affected individuals. New Age Dermatology had not determined the number; Marin Cancer Care's investigation and file review were ongoing.
- Operational Impact
- New Age Dermatology reported that an internal server was rendered inoperable and inaccessible. Carolina Foot & Ankle Associates experienced a network disruption. No other operational impact was reported.
- Ransom Or Extortion
- New Age Dermatology reported a ransomware attack, but no ransomware group had claimed responsibility at the time of writing. No ransom demand or extortion activity was reported.
- Claim Status
- confirmed