Atlantic Digestive Specialists Data Breach Investigation
Atlantic Digestive Specialists PLLC reported a network security incident that may have involved personal and protected health information. Its notice says potentially affected data was viewed or acquired without authorization during a two-day period in March 2026. Strauss Borrelli PLLC is investigating the incident and the legal rights of people who received notice. If you believe you were affected, you may fill out the secure contact form on this page to ask whether you may qualify to pursue a claim.
Key Facts at a Glance
- Entity Involved: Atlantic Digestive Specialists PLLC (Healthcare)
- Incident Type: Hacking/IT incident involving reported unauthorized network access
- Date of Incident: March 16, 2026 to March 17, 2026
- Discovery Date: March 2026
- Official Notice Date: September 30, 2026
- Exposed Information: Names, Social Security numbers, dates of birth, government identification numbers, financial information, medical and health insurance information, patient identifiers, usernames and passwords, and electronic signatures
- Affected Population: Not publicly disclosed in the materials reviewed
What Happened?
According to Atlantic Digestive Specialists PLLC’s public notice, it was alerted to suspicious activity in its network in March 2026. The company’s investigation reportedly determined that some information may have been viewed or acquired without authorization between March 16 and March 17, 2026. Atlantic Digestive then reviewed the potentially affected information; the review concluded in August. The company sent notice to potentially affected individuals beginning on September 30, 2026. The notice characterizes the matter as a data security incident involving possible unauthorized access, not as proof that every listed data element was accessed for every recipient.
What Information Was Exposed?
Atlantic Digestive Specialists reported that the information potentially involved varied by individual. According to its review, the affected network data may have contained the following categories:
- Names, Social Security numbers, dates of birth, and taxpayer identification numbers
- Driver’s license, state identification, passport, and alien registration numbers
- Financial account and payment-card information
- Clinical information, diagnoses, medical history, prescriptions, procedures, conditions, and dates of service
- Medical record, patient account, Medicaid, Medicare, and health insurance policy numbers
- Usernames and passwords and digital or electronic signatures
When identity, financial, and medical information is combined, affected people may face risks such as medical identity theft, fraudulent patient billing, insurance-verification scams, prescription-related inquiries, account fraud, or targeted phishing. These risks do not establish that misuse has occurred.
What Should You Do Next?
- Review your notice carefully: Keep the letter and envelope in a secure place. The individual notice may identify which categories of information were potentially involved and provide incident-specific instructions.
- Protect your online accounts: Change any exposed or reused passwords, beginning with email, healthcare portals, financial accounts, and insurance accounts. Use unique passwords and enable multifactor authentication where available.
- Monitor medical and insurance records: Check explanations of benefits, patient portal entries, prescription activity, and bills for unfamiliar providers, treatments, or claims. Contact the provider or insurer through a verified number if something appears incorrect.
- Watch financial and credit activity: Review bank and payment-card statements and obtain credit reports through AnnualCreditReport.com. Consider placing a free fraud alert or security freeze with the nationwide credit bureaus.
- Be alert for healthcare impersonation: Treat unexpected calls, emails, or texts about billing, insurance verification, prescriptions, or account access cautiously. Do not provide sensitive information or one-time security codes until you independently verify the sender.
Your Legal Rights
People whose information was potentially involved may have rights under federal or state privacy, consumer-protection, data-security, or breach-notification laws, depending on their circumstances and the law that applies. Possible issues may include whether reasonable safeguards were used, whether required notices were timely and adequate, and whether an individual experienced fraud, identity theft, lost time, out-of-pocket expenses, or other legally recognized harm.
Receiving a notice does not automatically establish a valid legal claim or entitlement to compensation. Potentially affected individuals may wish to preserve the notice, relevant communications, suspicious messages, credit reports, medical records, and documentation of losses, and consult qualified counsel about their options.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC investigates data security and privacy incidents involving sensitive personal, financial, and health information. The firm can evaluate the available notice, explain potential rights in plain language, and assess whether the reported incident may support a legal claim. Contacting the firm does not guarantee a particular result, and any evaluation depends on the facts and applicable law.
If you received a breach notification letter from Atlantic Digestive Specialists PLLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
