Med Atlantic (Virginia Urology) Suffers Ransomware Attack, Exposing Sensitive Patient Data Med Atlantic, Inc., operating as Virginia Urology in Richmond, disclosed a data breach stemming from a ransomware attack discovered on November 10, 2025. The incident, attributed to the cybercriminal group MS13-089, involved unauthorized access to internal systems, with the attackers publicly claiming responsibility on a dark web forum on December 15, 2025. The compromised data included personally identifiable information (PII)—such as full names, dates of birth, and Social Security numbers—as well as protected health information (PHI) from medical records. In some cases, employment details processed by human resources were also exposed. While the breach impacted only two residents of Massachusetts and one in New Hampshire, the sensitivity of the data heightens the risk of identity theft and fraud. Virginia Urology reported the breach to the Massachusetts and New Hampshire Attorneys General on January 7, 2026, and posted a public notice on its website. The company took immediate action to secure its network, halt unauthorized access, and engage cybersecurity experts for a forensic investigation. Law enforcement and the U.S. Department of Health and Human Services’ Office for Civil Rights were also notified. To mitigate potential harm, Virginia Urology partnered with Epiq Privacy Solutions ID to offer 24 months of complimentary identity monitoring, including credit monitoring, identity restoration, and theft insurance. Affected individuals received enrollment instructions via mail, with additional guidance on fraud alerts, credit freezes, and IRS Identity Protection PINs to prevent tax-related fraud. The breach underscores the persistent threat of ransomware attacks targeting healthcare providers, where even limited exposure of sensitive data can have severe consequences.