Pittsburgh Gastroenterology Associates, a medical group specializing in digestive health, fell victim to a ransomware attack by the Sinobi group in August 2025. The attackers claimed unauthorized access to the organization’s systems and exfiltrated sensitive patient and employee data, including names, addresses, Social Security numbers, medical records, health insurance details, and payment information (including card numbers with CVV codes). The breach exposed thousands of current and former patients and employees to risks of identity theft, fraud, and misuse of medical information. The group was listed on a dark web leak site, where the ransomware actors threatened to publish or sell the stolen data if demands were not met. The incident necessitates federal and state disclosures, along with individual notifications to affected parties. The scale and nature of the compromised data—spanning personal, financial, and protected health information—pose severe reputational, operational, and legal consequences for the organization.