GI Medicine Associates, PC data breach

Clerk's notes

On September 8, 2026, GI Medicine Associates, PC notified the Indiana Attorney General of a data breach originating from an unauthorized intrusion into its network systems on December 2, 2025. The medical practice confirmed that patient data was compromised, and the incident is currently under monitoring to assess its full scope and impact.

The compromised data included highly sensitive patient information. Specifically, the breach exposed individuals' Full Name, Date of Birth, Social Security Number, Medical Record Number, Health Insurance ID Number, Diagnosis and Treatment Information, Prescription Information, Provider and Treatment Dates, and Billing and Financial Information.

Exposure of this detailed personal and health data carries significant risks for those affected. Unauthorized access to elements like Medical Record Number, Health Insurance ID Number, and Diagnosis and Treatment Information can enable medical identity theft, potentially corrupting a victim's health records. Furthermore, the combination of Full Name, Date of Birth, and Social Security Number provides malicious actors with critical information for financial fraud or other forms of identity theft.

As a healthcare provider managing protected health information, GI Medicine Associates, PC is obligated under HIPAA and state consumer protection laws to implement robust security measures. The occurrence of this data breach raises questions about the adequacy of the safeguards in place to protect patient data from foreseeable threats, suggesting a potential failure to meet these mandatory security standards.

Individuals who received a data breach notification letter from GI Medicine Associates, PC have legal standing to explore their options. Receiving this notification confirms your information was affected and allows you to seek a review of your case. You do not need to have already experienced financial loss or identity theft to consider legal action; the increased risk alone may be grounds for relief. Our firm handles these privacy cases without upfront fees.

If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.