Manhattan law firm Tarter Krinsky & Drogin reports breach affecting 196,645 patients of healthcare clients
New York law firm Tarter Krinsky & Drogin has reported a breach of protected health information belonging to 196,645 patients of its healthcare clients. The firm found suspicious activity on September 10, 2025, and an investigation showed unauthorized access to some of its servers between July 9 and September 9, 2025. Exposed data varies by person and may include Social Security, driver's license and passport numbers and medical details.
Report (The HIPAA Journal) → · California Attorney General (Tarter Krinsky & Drogin notice of data event), Law360 Pulse
Key points
- The breach involved protected health information of 196,645 patients of the firm's healthcare clients.The HIPAA Journal
- Confidential and attorney-client privileged information was also involved, according to the report.The HIPAA Journal
- Suspicious activity was identified on September 10, 2025; unauthorized access occurred intermittently from July 9 to September 9, 2025.The HIPAA JournalCalifornia Attorney General (Tarter Krinsky & Drogin notice of data event)
- Possible data includes names, Social Security, driver's license and passport numbers, financial, medical and health insurance information.The HIPAA JournalCalifornia Attorney General (Tarter Krinsky & Drogin notice of data event)
- Affected individuals are offered 12 months of credit monitoring through Cyberscout, and federal law enforcement was notified.California Attorney General (Tarter Krinsky & Drogin notice of data event)
- A proposed class action filed in New York federal court in September accuses the firm of opacity about the attack, Law360 Pulse reported.Law360 Pulse
Sources3 articles across 3 outlets
California Attorney General (Tarter Krinsky & Drogin notice of data event)
Law360 Pulse
The HIPAA Journal