Texas Centers for Infectious Disease Associates reports third party data breach
Learn More
Texas Centers for Infectious Disease Associates (TCIDA), a Fort Worth-based medical practice specializing in infectious disease diagnosis and treatment is reporting a data breach caused by a cybersecurity incident at their former third-party billing vendor.
The breach was first detected on July 19, 2024, and was later attributed to the BianLian ransomware group. The gang claimed responsibility for the attack on August 14, 2024. The medical practice engaged cybersecurity experts to conduct an investigation and implemented enhanced security measures to minimize the risk of similar incidents occurring in the future.
The compromised data includes:
- Names
- Social Security numbers
- Dates of birth
- Driver's license numbers
- Medical record numbers
- Medicare/Medicaid numbers
- Health insurance numbers
- Medical or treatment information
The number of affected individuals and the breached third party have not been disclosed.
Nearly a year after the initial discovery, TCIDA issued a public press release on June 27, 2025, and began mailing notification letters to affected patients for whom they have current addresses. The delay in notification is not explained.
Update - as of 9th of July 2025, TCIDA reports that a total of 19,217 individuals were affected.
