Nephrology Associates Discloses 2026 Data Breach Impacting Patient Records Nephrology Associates, M.D., P.A., a U.S.-based medical practice specializing in kidney care, confirmed a data breach after unauthorized access to its network between January 17 and April 9, 2026. The incident was first detected on July 1, 2026, following a claim by the Insomnia ransomware group, which posted stolen data on the dark web on April 5, 2026. An investigation, conducted with external cybersecurity experts, revealed that exposed data included full names, dates of birth, government-issued IDs (e.g., driver’s licenses), treatment and diagnosis details, and health insurance policy information. The total number of affected individuals remains undisclosed. Nephrology Associates began notifying impacted patients via written letters on July 30, 2026, and established a dedicated response line (888-289-6950) for inquiries. The company’s notifications also included guidance on credit monitoring, fraud alerts, and medical identity theft prevention, along with state-specific resources for residents of Iowa, Maryland, Massachusetts, New York, North Carolina, Oregon, and Washington, D.C.