Nephrology Associates Hit by Ransomware Attack, Exposing Sensitive Patient Data Nephrology Associates, a U.S.-based medical practice specializing in kidney disease treatment, dialysis services, and hypertension management, recently disclosed a significant data breach. The incident, attributed to the ransomware group INSOMNIA, involved unauthorized access to the company’s network between January 17 and April 9, 2026. The breach was confirmed on July 1, 2026, after an investigation revealed that sensitive patient information had been exfiltrated. On April 5, 2026, INSOMNIA claimed responsibility for the attack, posting details on the Tor network. Nephrology Associates began notifying affected individuals on July 30, 2026. Exposed data includes: - Full names - Dates of birth - Driver’s license or state ID numbers - Government identification numbers - Treatment and diagnosis details - Health insurance policy information The law firm Shamis & Gentile P.A. is investigating the breach on behalf of affected patients, who may be eligible for compensation. The incident underscores the ongoing threat of ransomware attacks targeting healthcare providers and the potential risks to patient privacy.