Somnia Inc, a physician-owned firm that manages anesthesiology practices suffered a data breach that impacted an estimated 20 practices in the region serving about 430,000 people. The firm is the management services organization behind the recent breaches affecting many anesthesiology practices. The affected information includes individuals’ names, Social Security numbers, and some combination of data including date of birth, driver’s license number, financial account information, health insurance policy number, medical record number, Medicaid or Medicare ID and health information such as treatment and diagnosis.

The Vermont Office of the Attorney General disclosed a data breach affecting Bronx Anesthesia Services on October 24, 2022, after suspicious activity was detected on July 11, 2022. The incident involved unauthorized access to protected health information (PHI), including highly sensitive data such as names, dates of birth, driver’s license numbers, and potentially other confidential records. While the exact number of impacted individuals remains undisclosed, the breach poses significant risks due to the nature of the exposed information—particularly given the potential for identity theft, financial fraud, or misuse of medical data.The breach was identified by the company’s management firm, suggesting a possible cyber intrusion or unauthorized system access. Given the involvement of health records, the incident falls under severe regulatory scrutiny (e.g., HIPAA violations) and could lead to long-term reputational damage, legal penalties, and loss of patient trust. The exposure of personally identifiable information (PII) linked to healthcare further elevates the severity, as such data is a prime target for cybercriminals in secondary attacks (e.g., phishing, blackmail).