Published · United States
HIPAABreach report
Data Breach at Manhattan Law Firm Involved PHI of 197,000 Individuals
On 23 October 2026 a Manhattan law firm disclosed that PHI of 196,645 patients was exposed in a breach.
What happened
Tarter Krinsky & Drogin reported a data breach affecting the protected health information of 196,645 patients. The breach was disclosed on 23 October 2026. No enforcement action or fine was announced. The incident highlights the vulnerability of law firms handling health data. HIPAA breach‑notification rules may apply.
Why it matters
Firms that store or process PHI must verify their security controls and breach‑response plans, as regulators will scrutinise similar exposures.
Business impact
A breach of this size can trigger costly HHS investigations, notification obligations, and reputational damage.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?What to check
Conduct immediate risk assessmentHigh priority
Identify the scope of the PHI exposure and root cause.
Notify HHS OCRHigh priority
Submit a breach report to the Office for Civil Rights within 60 days of discovery.
Notify affected individualsHigh priority
Provide timely breach notices to all 196,645 patients as required by HIPAA.
1 source
Discussion
No comments yet. Start the discussion.