Island Ambulatory Surgery Center, LLC (IASC), a multispecialty surgery center located in Brooklyn, New York, recently experienced a data security incident that potentially compromised the personal and protected health information of certain individuals. The breach was initially detected on July 31, 2023, when IASC noticed unusual activity disrupting access to specific systems. In response, IASC swiftly took measures to secure its network and engaged independent cybersecurity experts to conduct a thorough investigation into the nature and scope of the incident.
The investigation revealed that an unauthorized actor had gained access to and acquired certain files from IASC’s network. It was determined that some of these files contained sensitive personal information including names, dates of birth, Social Security numbers, driver’s license numbers, medical information, and health insurance details. By February 7, 2024, IASC confirmed that individuals’ information had been impacted and began the process of notifying those affected, aiming to provide this information as promptly as possible.
On April 5, 2024, IASC officially notified the potentially impacted individuals about the breach. The notification included detailed information about the incident and guidance on steps the affected individuals could take to protect their information. Recognizing the severity of the breach, IASC also established a toll-free call center to address any questions and concerns from those affected. The call center is available Monday through Friday and offers support from 9:00 AM to 9:00 PM Eastern Time.
IASC has expressed deep regret over the incident and reassured that safeguarding the privacy and protection of personal and protected health information remains their top priority. The incident underscores the critical importance of robust security measures in protecting sensitive health data. IASC is taking comprehensive actions to prevent future breaches and to strengthen their cybersecurity infrastructure to protect against similar incidents.