Practicefirst Medical Management Solutions
Disclosed May 23, 20231,200,000 affectedSettled
Unpatched software led to attack on 1.2M patients' data; USD 550,000 NY AG
A missed software update left Practicefirst's network open to a cyberattack affecting more than 1.2 million people, including over 428,000 New Yorkers. It paid USD 550,000 in penalties and offered credit monitoring.
What is known
| People affected | 1,200,000 (as reported by the organization) |
|---|---|
| Disclosed | May 23, 2023 |
| Attack | Ransomware |
| Data exposed | HealthNamesSocial Security numbers |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | USD 550,000 NY AG penalty (May 2023) (about $550K) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.