NJ Pain Care Specialists Discloses 2025 Data Breach Impacting Patient Information NJ Pain Care Specialists LLC, a New Jersey-based pain management practice, reported a data breach involving unauthorized access to its systems in February 2025. The incident was disclosed to the U.S. Department of Health and Human Services on May 14, 2026, with a public notice posted the same day. The breach was detected after suspicious activity was identified within the company’s network, prompting an investigation with third-party cybersecurity experts. Findings revealed that an unauthorized actor accessed a limited number of systems and servers between February 25 and 28, 2025, potentially exfiltrating sensitive data. On March 16, 2026, the ransomware group Lynx claimed responsibility for the attack via a dark web posting. Exposed information included personally identifiable information (PII) such as names, addresses, dates of birth, and driver’s license or state ID numbers. Additionally, protected health information (PHI) may have been compromised, encompassing medical record numbers, treatment details, provider names, prescription information, and health insurance data. In response, NJ Pain Care Specialists provided affected individuals with guidance on monitoring accounts and credit reports, though no further remediation details were specified. The company offered a dedicated contact line (732-720-0247) and mailing address for inquiries.