Anesthesia Group of Albany Discloses Data Breach Exposing Patient Health Records Anesthesia Group of Albany, P.C., a physician-led anesthesia practice based in Albany, New York, has reported a data breach involving the exposure of protected health and medical records. The practice serves multiple regional hospitals and surgery centers, including St. Peter’s Hospital, Saratoga Hospital, Samaritan Hospital, and Albany Memorial Hospital, providing anesthesia for procedures ranging from cardiac and orthopedic surgeries to pediatric and obstetric care. Details surrounding the breach remain limited. Public disclosures have not specified how the incident occurred, when it took place, or whether third-party vendors were involved. The practice also has not disclosed the total number of affected individuals or the exact categories of compromised data. However, exposed records may include sensitive information such as diagnoses, treatment histories, medications, provider names, health insurance identification numbers, and medical record numbers. The breach was formally reported to the Vermont Attorney General on August 7, 2026. Individuals seeking further information can contact Anesthesia Group of Albany at its Albany office or by phone. The incident underscores ongoing risks to healthcare data security, though the full scope and impact remain unclear pending additional details.

Albany College of Pharmacy and Health Sciences Reaches $5,080 Settlement Over 2024 Data Breach Albany College of Pharmacy and Health Sciences (ACPHS) has agreed to a class action settlement following an August 2024 cybersecurity incident that potentially exposed sensitive personal data. The breach, which occurred between August 31 and September 14, 2024, may have compromised Social Security numbers, financial information, passport numbers, driver’s license numbers, and other personally identifiable information (PII). Eligibility and Compensation U.S. residents whose data was impacted and who received notice of the breach are eligible to file claims. Compensation options include: - Up to $5,000 for documented out-of-pocket losses (e.g., identity theft, credit monitoring fees, ID replacement costs). - Up to $80 for time spent responding to the breach (four hours at $20/hour). - $25 as a one-time cash payment for those not claiming documented losses. - Two years of free credit monitoring (CyEx Financial Shield Total) with $1 million in fraud insurance. Claim Process and Deadlines Eligible individuals can submit claims online, by mail, or via a paper form. Required documentation varies by claim type: - Documented losses require receipts, bank statements, or other proof. - Lost time requires an attestation of hours spent. - Cash payment requires no documentation beyond the claim form. The deadline to file a claim is November 16, 2026, with the final approval hearing scheduled for December 10, 2026. Payments will be distributed after court approval, with options including PayPal, Venmo, Zelle, or a physical check. Settlement Fund Breakdown The total settlement fund covers: - Up to $300,000 in attorneys’ fees and costs. - Up to $10,000 in service awards for class representatives. - Credit monitoring costs (based on claims filed). - Payments to eligible class members (amounts depend on valid claims). Background and Allegations The lawsuit alleged that ACPHS failed to adequately protect sensitive data after a third-party attacker gained unauthorized access to its network. While ACPHS denied wrongdoing, it opted to settle to avoid prolonged litigation. The breach underscores the risks of inadequate cybersecurity measures in safeguarding PII.