Jaime S. Schwartz, MD Data Breach Details
The breach, which occurred on June 27, 2024, led to the unauthorized acquisition of patient data, impacting thousands of individuals.
Upon discovery, the practice engaged forensic cybersecurity specialists to investigate the extent of the compromise. By January 2, 2025, after an extensive electronic review, it was determined that sensitive patient information had been exposed.
To support affected individuals, 12 months of complimentary credit monitoring and fraud assistance services are being offered through CyberScout, a TransUnion company. These services include real-time alerts for any changes to an individual’s credit file.
History of Security Concerns
This is not the first security incident involving Jaime S. Schwartz, MD. A previous breach in late 2023 involved the theft of 1.1 terabytes of sensitive patient data, including intimate medical images and videos. Cybercriminal group Hunters International allegedly obtained and leaked patient photographs taken during medical procedures, some showing both faces and private areas.
The 2023 attack led to a public extortion campaign, in which hackers threatened to release more private patient data unless ransoms were paid. When the practice refused to comply, cybercriminals allegedly contacted patients directly, demanding payment to remove their names, contact information, and images from public websites.
Allegations in a federal lawsuit claim that Dr. Schwartz failed to notify patients of both breaches in a timely manner, only addressing the incidents after hackers publicly exposed patient information. The case highlights serious concerns about data security, patient privacy, and compliance with federal and state laws regarding breach notifications.
What Information Was Compromised?
The review determined that certain individuals’ personal information was present on the affected system, including:
- Full name
- Address
- Date of birth
- Medical records and treatment details
- Prescription medications
- Patient images
- Health insurance information
Not all individuals had the same types of data compromised, and Social Security numbers and financial information were not impacted.