Data Breach at Manhattan Law Firm Involved PHI of 197,000 Individuals
Manhattan law firm Tarter Krinsky & Drogin has reported a data breach affecting the protected health information of nearly 197,000 individuals. The incident was reported to HIPAA authorities, indicating the compromised data belongs to patients of a healthcare client the firm represented.
Why this matters: Law firms hold some of the most sensitive data that exists, and health information sits near the top of that list. Nearly 197,000 people did not choose this firm. They were patients of a healthcare provider, and their records ended up at a law firm they likely never heard of. When a breach happens there, they have almost no way to know the risk or protect themselves. This is what third-party data exposure looks like in practice: your information travels far beyond where you gave it, and you have no say in who secures it.
Who should care: Cybersecurity · Privacy officers · Administrators · Healthcare professionals · Compliance
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.