Regional Urology Reports Data Breach Affecting Legacy Systems Regional Urology disclosed a data breach involving unauthorized access to sensitive personal and health information stored in retired systems. On October 10, 2025, the organization detected unusual activity in legacy infrastructure that had been inactive since 2022. An investigation confirmed that an unauthorized third party accessed and potentially exfiltrated data on or around October 5, 2025. The exposed information varies by individual but may include: - Full names - Social Security numbers - Dates of birth - Medical record numbers - Treatment details (provider names, dates of service, medical history, imaging, and procedure records) related to care received before December 31, 2022 Regional Urology published a breach notice on its website and filed an official report with the U.S. Department of Health and Human Services’ Office for Civil Rights on December 9, 2025. Affected individuals are being notified of the specific data compromised and offered complimentary credit monitoring services. The incident underscores the risks associated with unmaintained legacy systems in healthcare.