Data Breach Summary
On May 22, 2025, Academic Urology & Urogynecology of Arizona experienced a significant data breach, attributed to a ransomware attack by the hacking group INC RANSOM. The group publicly claimed responsibility for the breach in a dark web posting on June 17, 2025, revealing the severity of the situation.
The breach, which was identified after abnormal activity was detected on the company’s network, involved the encryption and potential exfiltration of sensitive data. Ransomware attacks, particularly those carried out by groups like INC RANSOM, often target both the encryption and theft of information, with the threat of releasing stolen data unless their demands are met. In this case, the attack has compromised a wide range of personally identifiable information (PII) and protected health information (PHI).
As of now, Academic Urology has not received any reports of identity fraud or financial fraud resulting from the breach. However, out of an abundance of caution, the organization has issued a public notice and encourages individuals to monitor their financial accounts and credit reports for any suspicious activity.
The sensitive data involved in the breach includes, but is not limited to:
Full name
Social Security number
Date of birth
Address
Driver’s license number or other government-issued identification numbers
Tribal identification card
Digital signatures
Passport number
Individual taxpayer identification number or IRS-issued identity protection personal identification number
Health insurance policy number or subscriber identification number
Unique health insurer identifiers
Credit card and financial account information
Diagnosis and conditions information
Lab results, medications, and claims history, including appeals records
To help protect members, Academic Urology & Urogynecology is offering a free one-month membership to IDX credit monitoring services. Enrolling in the service is easy, secure, and does not impact an individual’s credit score. Affected individuals are encouraged to take advantage of this service as a precautionary measure.
Those who received a breach notification from Academic Urology & Urogynecology are advised to:
Enroll in the free IDX credit monitoring service
Monitor bank accounts and credit reports for suspicious activity
Report any signs of identity theft immediately to authorities
If you received a notification about the breach, you may want to explore your legal options. Academic Urology & Urogynecology to protect sensitive patient data has potentially exposed individuals to identity theft and other risks. You could be eligible to join a class action lawsuit against Academic Urology & Urogynecology for damages caused by the breach.
To determine if you qualify for the class action lawsuit or need further legal support, contact Class Action U for a free consultation. Our legal experts can help you navigate the next steps and ensure that your voice is heard in the fight for justice and accountability.
©2024 ClassActionU