Data Breach at Allergy, Asthma & Sinus Care Center Exposes Patient Information A data breach at the Allergy, Asthma & Sinus Care Center (operating as Allergy, Asthma and Food Allergy Centers) has potentially exposed sensitive patient information. The incident originated from Rosch Visionary Systems Inc., a software vendor providing technology services to allergy medical practices, including the affected center. Rosch detected a compromise within a portion of its network, which may have impacted personal and health data stored in its systems. While the exact timeline of the breach and the attack method remain undisclosed, the exposed information included Social Security numbers and medical records. The breach was officially reported to the Massachusetts Office of Consumer Affairs and Business Regulation on September 11, 2026. In response, Rosch is offering 24 months of free credit monitoring and proactive fraud assistance to affected individuals. Those impacted must enroll within 90 days of receiving their notification letter using a unique code provided. A dedicated phone line (available Monday–Friday, 8 a.m.–5 p.m. CT) and a mailing address (1601 11th Ave., Suite 102, Altoona, PA 16601) have been established for inquiries. The incident highlights the risks of third-party vendor vulnerabilities in healthcare data security.

Rosch Visionary Systems Data Breach Exposes Patient Health Information Rosch Visionary Systems Inc., a Pennsylvania-based software provider specializing in allergy and immunotherapy management for medical practices, disclosed a data breach affecting patients in the U.S. The company’s systems, used by clinics across the U.S. and Canada, were compromised, exposing sensitive personal and health data. The breach impacted patients of Texas Regional Asthma, Allergy & Immunology Center and Allergy, Asthma & Sinus Care Center, though the exact scope of affected individuals remains unclear. On January 30, 2026, the ransomware group LYNX claimed responsibility, posting stolen data on the dark web. Rosch did not specify when the breach occurred or was discovered but reported it to the U.S. Department of Health and Human Services on March 23, 2026. Exposed data varied by individual but included names, medical records, and addresses. In response, Rosch offered 24 months of free credit monitoring and fraud assistance, requiring affected individuals to enroll within 90 days via a dedicated website. A support hotline was also established for inquiries. The incident highlights risks associated with third-party healthcare software vendors and the growing threat of ransomware targeting sensitive medical data.