Thousands of New Jersey patients warned after shocking health care data breach

🏥 Nearly 13,000 patients may have had sensitive personal and medical information exposed in a cybersecurity breach involving a New Jersey law firm.
🔒 The breach affected records connected to several major New Jersey health systems, prompting notifications and free identity protection for impacted patients.
⚠️ The incident is another reminder that health care remains a prime target for cybercriminals seeking valuable personal information.

Thousands caught up in health data breach

For thousands of New Jersey patients, a visit to the doctor may have landed their personal information in the hands of cybercriminals.

According to reporting by NJ.com, nearly 13,000 patients connected to several major New Jersey health systems are being notified after a cybersecurity breach at Greenbaum Rowe Smith & Davis LLP, a law firm that provides legal services to healthcare providers throughout the state. The incident affected approximately 12,800 patients who received care at Atlantic Health System, Hackensack Meridian Health and Trinitas Regional Medical Center.

What happened in the cybersecurity breach?

Greenbaum said it discovered suspicious activity within its computer network and launched a forensic investigation. The firm determined an unauthorized party gained access to certain files containing protected health information belonging to patients of some of its healthcare clients.

The law firm said the information involved varies by individual but may include names, Social Security numbers, medical information, health insurance information and other personal data. There has been no public indication that all categories of information were exposed for every affected person.

What affected patients should know

Patients whose information may have been compromised are being notified directly. Greenbaum is also offering complimentary identity theft protection and credit monitoring services through IDX. The firm has established a dedicated assistance line for affected individuals seeking more information.

Healthcare organizations and the law firms that represent them routinely maintain sensitive patient records, making them attractive targets for cybercriminals. This latest incident is another reminder that even companies working behind the scenes in the healthcare industry can become gateways to highly sensitive personal information.

While investigators continue to review the incident, anyone receiving a notification letter is encouraged to carefully monitor financial accounts, credit reports and insurance statements for suspicious activity.

Report a correction 👈 | 👉 Contact our newsroom