Published · Updated · United States
HIPAABreach report
Tarter Krinsky & Drogin reports breach of protected health information of 196,645 patients
On 23 October 2026 a Manhattan law firm disclosed that PHI of 196,645 patients was exposed in a breach.
1 source
What happened
- Tarter Krinsky & Drogin reported a data breach affecting the protected health information of 196,645 patients.
- No enforcement action or fine was announced.
- The incident highlights the vulnerability of law firms handling health data.
- HIPAA breach‑notification rules may apply.
Why it matters
Firms that store or process PHI must verify their security controls and breach‑response plans, as regulators will scrutinise similar exposures.
Business impact
A breach of this size can trigger costly HHS investigations, notification obligations, and reputational damage.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
Conduct immediate risk assessmentHigh priority
Identify the scope of the PHI exposure and root cause.
Notify HHS OCRHigh priority
Submit a breach report to the Office for Civil Rights within 60 days of discovery.
Notify affected individualsHigh priority
Provide timely breach notices to all 196,645 patients as required by HIPAA.
Discussion
No comments yet. Start the discussion.