Multiple Healthcare and Financial Firms Hit by Data Breaches in 2026 On August 24, 2026, Milwaukee-based law firm Ademi LLP announced investigations into data breaches affecting several organizations, including Apollo Global, Alta Orthopaedic, and Brookhaven ENT, over potential failures to protect sensitive personal information. Brookhaven ENT, a healthcare provider, disclosed a breach occurring between March 10 and March 16, 2026, where unauthorized access to patient data may have exposed personal and medical records. The firm is notifying affected individuals, who now face heightened risks of identity theft, financial fraud, and other misuse. Ademi LLP is examining whether Brookhaven ENT implemented adequate safeguards to prevent the incident. Separate investigations are underway for Alta Orthopaedic and Apollo Global, though specific breach timelines and compromised data details remain undisclosed. The exposed information may include financial records, medical data, and other personally identifiable information (PII) across sectors such as healthcare, finance, and investment services. Ademi LLP, which specializes in consumer and investor class actions, is offering free evaluations of potential claims for affected individuals. The breaches underscore ongoing vulnerabilities in data security across industries, with legal scrutiny focusing on whether the organizations maintained reasonable cybersecurity measures.

Apollo Hospitals, one of India’s largest private healthcare chains, faced a 247% surge in cyberattacks in early 2025, with persistent threats targeting its hospital systems and patient portals. Cybercriminals exploited vulnerabilities in digital health records, leading to disruptions in critical services, including delayed surgeries, compromised diagnostic reports, and unauthorized access to patient data. The attack vector primarily involved DDoS overloads and phishing scams targeting employee accounts, crippling internal communication systems during peak operational hours. The breach resulted in leaked medical histories of high-profile patients, including politicians and business leaders, alongside the exposure of sensitive treatment details of cancer and cardiac patients. Emergency response systems experienced 12-hour outages, forcing manual record-keeping and postponing elective procedures. While no direct fatalities were reported, the incident triggered regulatory scrutiny and a mass patient lawsuit, alleging negligence in safeguarding health data. The hospital’s reputation suffered irreversible damage, with a 30% drop in outpatient visits in the following quarter. Recovery efforts involved complete overhauls of legacy IT infrastructure, costing an estimated ₹120 crore ($14.5M) in remediation and legal settlements.