Heidell, Pittoni, Murphy & Bach
Disclosed Mar 27, 20233 years ago114,000 affectedSettled
Law firm breach exposed 114,000 hospital patients' data; USD 200,000 NY AG
A 2021 breach at a law firm representing New York hospitals compromised birth dates, Social Security numbers, insurance and medical information of about 114,000 patients. The firm paid USD 200,000 for state law and HIPAA security violations.
What is known
| People affected | 114,000 (as reported by the organization) |
|---|---|
| Disclosed | Mar 27, 2023 |
| Attack | Hacking |
| Data exposed | Dates of birth, Social Security numbers, Insurance, Health, Names |
| Sector | Legal and services · US |
| Status | Settled |
| Lawsuit or fine | USD 200,000 NY AG penalty (March 2023) (about $200K) |
Sources
| Source | |
|---|---|
| NY AG: USD 200,000 from law firmag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | Mar 27, 2023 | 114,000 |
Other breaches at Heidell, Pittoni, Murphy & Bach
| Breach | Affected | ||||
|---|---|---|---|---|---|
| Disclosed May 16, 2022May 16, 20224 years agoHacking | May 16, 20224 years ago | Hacking | Legal and services | Confirmed | 115K |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.