Practicefirst Medical Management Solutions
Disclosed May 23, 20233 years ago1,200,000 affectedSettled
Unpatched software led to attack on 1.2M patients' data; USD 550,000 NY AG
A missed software update left Practicefirst's network open to a cyberattack affecting more than 1.2 million people, including over 428,000 New Yorkers. It paid USD 550,000 in penalties and offered credit monitoring.
What is known
| People affected | 1,200,000 (as reported by the organization) |
|---|---|
| Disclosed | May 23, 2023 |
| Attack | Ransomware |
| Data exposed | Health, Names, Social Security numbers |
| Sector | Healthcare · US |
| Status | Settled |
| Lawsuit or fine | USD 550,000 NY AG penalty (May 2023) (about $550K) |
Sources
| Source | |
|---|---|
| NY AG: USD 550,000 from Erie County medical management companyag.ny.gov · Regulator | Regulator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Researchtotal | May 23, 2023 | 1,200,000 |
History of this record
- 2026-09-25 · added · seed source
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.