Partners in Pediatrics (PIP), a pediatric healthcare provider, experienced a cybersecurity incident where an unauthorized individual gained access to sensitive patient records. The breach exposed personally identifiable information (PII) and protected health information (PHI), including names, dates of birth, Social Security numbers, driver’s license numbers, clinical/treatment details (lab results, prescriptions), provider information, and health insurance data. The exact number of affected individuals remains undisclosed. The incident has prompted a class-action investigation by Lynch Carpenter, LLP, a law firm specializing in data privacy litigation, suggesting potential legal and financial repercussions for PIP. The compromised data—particularly PHI and PII—poses significant risks of identity theft, fraud, and misuse of medical records, undermining patient trust and potentially violating healthcare regulations like HIPAA. The breach’s scope and sensitivity of the exposed data indicate severe operational and reputational damage to PIP.

Partners in Pediatrics, a pediatric healthcare practice in Denver and Englewood, Colorado, suffered a data breach in March 2025 when an unauthorized actor accessed its internal email network. The breach exposed sensitive patient and family data, including personally identifiable information (PII) and protected health information (PHI) such as names, contact details, Social Security numbers, driver’s license information, health insurance records, medical histories, and payment data. The incident was discovered on March 5, 2025, with investigations concluding by September 23, 2025. Affected individuals were notified in October 2025, though the exact number of victims remains undisclosed. The breach was reported to the Vermont Attorney General’s office on October 6, 2025. Partners in Pediatrics responded by engaging cybersecurity experts, securing systems, and setting up a dedicated assistance line for impacted individuals. The exposure of such highly sensitive data poses significant risks of identity theft, financial fraud, and misuse of medical records.