The Center for Discovery Data Breach Investigation
The Center for Discovery recently reported a data incident that may have involved names and Social Security numbers, according to information associated with a Massachusetts regulatory filing. The available record states that Accumedic Computer Systems (“Accumedic”), the third-party billing services vendor for The Center of Discovery, experienced a cyber incident that affected its systems. Accumedic’s investigation determined that an authorized third party initially gained accessed to their systems on or around April 8, 2026 and potentially obtained customer information between June 4 and June 8, 2026. The available record does not disclose the discovery or consumer notice date. Strauss Borrelli PLLC is investigating the matter and evaluating potential legal options for affected individuals. If you received a notice or believe your information was involved, fill out the secure contact form on this page to ask whether you may qualify for a claim.
Key Facts at a Glance
- Entity Involved: The Center for Discovery (Healthcare)
- Incident Type: Third-party cybersecurity incident
- Date of Incident: April 8, 2026 to June 8, 2026
- Discovery Date: Not disclosed in the available filing information
- Official Notice Date: Accumedic notified The Center for Discovery on August 25, 2026, but the notice did not disclose when impacted individuals were notified
- Exposed Information: Names and Social Security numbers
- Affected Population: 3 Massachusetts residents reported in the filing; a broader total was not provided
What Happened?
According to information associated with a Massachusetts Attorney General filing publicly listed on November 5, 2026, The Center for Discovery reported an incident period extending from April 8, 2026, through June 8, 2026. The available filing information identifies Accumedic Computer Systems as a third party connected to the matter, but it does not establish how any unauthorized activity may have occurred.
The available record also does not specify when the incident was discovered or when individual notices were sent. Accordingly, the precise circumstances and overall scope remain unclear based on the information provided. Individuals who receive a notice should review it carefully because it may contain details specific to their information and available protective services.
What Information Was Exposed?
The regulatory filing information identifies names and Social Security numbers as information that may have been involved. A name combined with a Social Security number can increase the risk of identity theft, fraudulent credit applications, tax fraud, or attempts to impersonate an affected person.
Because The Center for Discovery operates in the healthcare sector, affected individuals should also watch for fraudulent patient bills, insurance-verification calls, prescription-related inquiries, and signs of medical identity theft. However, the available filing information does not state that medical records, diagnoses, insurance information, or prescription data were exposed. Individuals should rely on their notices for person-specific details.
What Should You Do Next?
- Place a credit freeze: Contact Equifax, Experian, and TransUnion to restrict access to your credit files. A freeze is free and can make it more difficult for someone to open a new account using your identity.
- Review your credit reports: Obtain reports from all three nationwide credit bureaus through AnnualCreditReport.com. Dispute unfamiliar accounts, addresses, or inquiries directly with the reporting bureau and the business involved.
- Monitor Social Security and tax activity: Review your Social Security earnings record and remain alert for unexpected tax notices, benefit applications, or employment records that do not belong to you.
- Check medical and insurance records: Examine explanations of benefits, patient portals, pharmacy records, and medical bills for unfamiliar services. Report suspected medical identity theft to the healthcare provider and insurer promptly.
- Watch for targeted scams: Be cautious of callers, emails, or texts claiming to verify insurance, arrange prescription services, collect patient balances, or confirm sensitive information. Do not provide personal information through an unsolicited communication.
Your Legal Rights
People whose information was involved may have rights under federal or state law, depending on where they live, the information affected, the adequacy of notice, and whether they experienced losses or misuse. Potential remedies may include reimbursement for documented out-of-pocket expenses, compensation for time spent responding to identity theft, or other relief where permitted by law.
These outcomes are not automatic, and the available filing does not establish that every person experienced identity theft or compensable harm. Keep copies of any notice, credit-monitoring enrollment information, suspicious communications, credit reports, bills, and receipts. A legal review can help determine which rights may apply to an individual’s circumstances.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents consumers in privacy and data incident matters and can evaluate regulatory filings, notice language, exposed data categories, and documented losses. A confidential review can help affected individuals understand whether they may have a claim and what information should be preserved. Contacting counsel does not guarantee a recovery, and any available options will depend on the facts and applicable law.
If you received a breach notification letter from The Center for Discovery:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
