Kentucky pediatric practice "Physicians to Children & Adolescents" hit by ransomware attack
Learn More
Physicians to Children & Adolescents (PTCA), a pediatric healthcare provider based in Kentucky, is reporting a data breach after a cyberattack claimed by the Cactus ransomware group.
The breach occurred between November 15 and November 20, 2024, when hackers breached the clinic's network and potentially stole data of thousands of patients. The investigation confirmed that information stored in PTCA's systems may have been accessed and stolen by the attackers during the five-day breach window.
The Cactus ransomware group claim to have stolen:
- Name
- Social Security number
- Date of birth
- Address
- Medical treatment and/or diagnosis information
- Medical history information
- Lab results
- Diagnostic imaging results
- Prescription information
- Health insurance information
- Medical record numbers
The number of affected individuals is not disclosed.
On October 24, 2025, nearly a year after the breach occurred, PTCA posted public notice of the incident on its website and filed an official breach notification with the U.S. Department of Health and Human Services' Office for Civil Rights. The organization is notifying affected individuals and offering complimentary credit monitoring services
