Incident

General Physician, PC reports data breach exposing patient SSNs


Learn More

General Physician, PC (GPPC) recently disclosed a data security incident that may have exposed sensitive personal and health information of certain individuals. GPPC is a healthcare services provider headquartered in Dunkirk, New York, serving the Western New York region.

The incident was discovered on June 12, 2024, through a breach of a GPPC email account. The attacker had unauthorized access between April 6, 2024 – June 12, 2024. After discovering the suspicious activity, GPPC initiated an investigation with third-party digital forensic specialists and is conducting a comprehensive review to identify affected individuals.

The information that may have been accessed includes:

  • Full names
  • Addresses
  • Social Security numbers
  • Financial account information
  • Dates of birth
  • Medical history information
  • Mental and physical treatment information
  • Diagnosis information
  • Treating physician details
  • Medical record numbers
  • Health insurance information
  • Policy numbers
  • Subscriber numbers
  • Group/plan numbers

GPPC has not disclosed the number of individuals affected by this incident. They plan to notify impacted individuals via mail

 

General Physician, PC reports data breach exposing patient SSNs