Tri-Cities Gastroenterology Data Breach Exposes Sensitive Patient Information On April 29, 2026, Tri-Cities Gastroenterology, a healthcare provider with five offices in northeast Tennessee, began notifying individuals affected by a data breach discovered in late 2025. An investigation concluded on April 22, 2026, revealed that an unauthorized third party accessed and exfiltrated files from the company’s network on or around December 11, 2025. The compromised data includes highly sensitive personal and medical information, such as full names, Social Security numbers, dates of birth, addresses, email addresses, phone numbers, gender, and medical record numbers. The breach has prompted legal scrutiny, with attorneys investigating whether a class action lawsuit can be filed on behalf of affected individuals to seek compensation for privacy violations, out-of-pocket costs, and other damages. Tri-Cities Gastroenterology has not disclosed the total number of individuals impacted, but the exposed data poses significant risks for identity theft and fraud. The incident underscores ongoing vulnerabilities in healthcare data security, particularly for organizations handling protected health information.