Millcreek Pediatrics Data Breach Exposes Sensitive Information of Over 14,000 Individuals In February 2025, Millcreek Pediatrics, a Wilmington, Delaware-based pediatric practice, suffered a data breach involving unauthorized access to its network. The incident occurred between February 17 and 25, 2025, and was detected after suspicious activity prompted an investigation with cybersecurity experts. On October 27, 2025, the practice confirmed that files containing personal and protected health information had been accessed or acquired by an unauthorized party. The breach impacted at least 14,095 individuals across the U.S., exposing sensitive data including: - Full names - Dates of birth - Addresses - Social Security numbers - Driver’s license/state ID numbers - Medical and health insurance information Millcreek Pediatrics reported the breach to the U.S. Department of Health and Human Services, posted a public notice on its website, and began notifying affected individuals on November 21, 2025. The law firm Shamis & Gentile P.A. is investigating potential legal action for those impacted, citing possible compensation for damages. The breach highlights ongoing risks to healthcare data security, with exposed information posing long-term risks for identity theft and fraud.