Westside GI Data Breach

Westside GI, an ambulatory endoscopy and surgery center in New York City, may have suffered a data breach after a hacker group claimed to have compromised the practice’s systems. Because healthcare providers like Westside GI store sensitive patient records, any unauthorized access raises serious concerns for the patients and staff whose information may be involved.

Westside GI’s Data Breach Investigation

Class Action U is investigating a possible data breach at Westside GI after reports surfaced that the hacker group PEAR claimed responsibility for an attack on the practice. According to a September 24, 2026 post on the dark web monitoring site Ransomware.live, the attack was estimated to have occurred just two days before the post appeared. A separate dark web security site, Breachsense, similarly reported that PEAR claimed to have exfiltrated approximately 216 gigabytes of data from Westside GI. As of this writing, Westside GI has not publicly confirmed the breach, disclosed its scope, or specified what categories of information may have been affected. Healthcare providers, including endoscopy and surgery centers like Westside GI, are frequent targets for ransomware groups because they maintain large volumes of sensitive patient data, including medical records, insurance information, and personal identifiers such as Social Security numbers and dates of birth. This type of information is highly valuable on dark web marketplaces because it can be used for medical identity theft, insurance fraud, and other forms of financial crime that are often harder for victims to detect and unwind than a simple stolen credit card number. Ransomware groups typically threaten to publish stolen data unless a ransom is paid, and in cases where no payment is made, the data can end up posted publicly or sold to other criminal actors, increasing the risk to anyone whose information was included in the affected systems. Healthcare entities that collect and store this kind of sensitive information have a legal and ethical duty to implement reasonable safeguards against unauthorized access and to promptly notify affected individuals when those safeguards are breached. Class Action U will continue to monitor this situation as more information becomes available about whether Westside GI confirms the incident, the true scope of any exposure, and which categories of patient or staff data may have been compromised. If you are a current or former patient or employee of Westside GI and are concerned that your personal or medical information may have been exposed, it is important to understand your rights. Attorneys who focus on data breach and healthcare privacy litigation can help you evaluate whether you may be entitled to compensation for the time, expense, and risk associated with monitoring your accounts and protecting your identity going forward.

When Did This Breach Occur?

The suspected attack was reported by dark web monitoring sites on September 24, 2026, and was estimated to have occurred approximately two days earlier. Westside GI has not publicly confirmed the incident or a specific breach date.

What Information Was Breached?

Westside GI has not publicly confirmed which categories of personal or medical information may have been involved. A ransomware group claimed to have exfiltrated approximately 216 gigabytes of data from the practice, though the specific contents have not been independently verified.

What You Can Do

If you are a current or former patient or employee of Westside GI, consider taking the following steps: monitor your medical and financial statements for unfamiliar activity, watch for unexpected insurance claims filed in your name, consider placing a fraud alert or credit freeze with the major credit bureaus, and be alert to phishing attempts referencing this incident.

File a Data Breach Lawsuit Against Westside GI

If your personal or medical information was compromised in the Westside GI data breach, you may have legal options. Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.