Thomas Davies recently disclosed a data breach involving unauthorized access to its systems, potentially compromising sensitive protected health information (PHI). The incident was formally reported to the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR) on September 29, 2025, adhering to regulatory requirements for breaches affecting PHI. While full details remain undisclosed, the breach is confirmed to impact over 14,500 individuals, exposing their medical and personal data. The compromised information may include health records, treatment histories, or personally identifiable information (PII) linked to healthcare services. The company is expected to initiate notifications to affected individuals, though the exact scope of the breach—such as whether the data was exfiltrated, misused, or publicly leaked—has not been clarified. Given the healthcare sector’s critical nature, the breach poses risks of identity theft, medical fraud, or targeted phishing attacks against patients. The incident underscores vulnerabilities in safeguarding PHI and may trigger regulatory scrutiny, legal repercussions, and reputational damage for Thomas Davies.