50,640 People Affected After Hackers Hit Healthcare Firm, Stealing Personal, Financial and Medical Data

New data shows that tens of thousands of people have been affected after hackers attacked a healthcare firm and accessed sensitive patient information.

According to the U.S. Department of Health and Human Services Office for Civil Rights, Utah-based Rocky Mountain Associated Physicians recently reported a hacking incident affecting 50,640 individuals, with the breach involving a network server.

In a separate report, HIPAA Journal says a forensic investigation determined that on February 2, 2026 that an unauthorized actor accessed certain systems, including a database containing protected health information belonging to current and former patients.

According to the report, the compromised data may have included names, dates of birth, contact information, Social Security numbers, medical record numbers, diagnosis and treatment information and health insurance details. For some individuals, the exposed data may have also included financial information such as debit and credit card numbers and PINs.

HIPAA Journal also reports that a ransomware group claimed responsibility for the attack and listed the organization on a dark web leak site after a ransom was not paid, with data allegedly published online.

In response to the incident, the company says it engaged third-party cybersecurity experts to investigate the breach and implement additional safeguards to help prevent similar events in the future.

Affected individuals are being notified of the incident and have been offered complimentary credit monitoring and identity theft protection services.

Generated Image: Midjourney