A New Hampshire gastroenterology group has told patients that someone may have seen or taken their records during a brief March breach.
Atlantic Digestive Specialists alerted the public in a notice dated September 30, 2026. Suspicious network activity first came to light in March, prompting the practice to bring in outside security investigators. Those experts concluded that data may have been accessed without permission on March 16 and March 17, 2026. Reviewing the files afterward showed the trove could hold personal and protected health information, including Social Security numbers and clinical details.
Lawyers working with ClassAction.org are weighing whether to file a class action, and patients are being told to stay alert for identity theft and fraud.
Specialty practices keep showing up in breach tallies because one hijacked account or server can lay bare highly sensitive material. Gastroenterology offices hold procedure notes, imaging, and diagnostic findings that resell well on criminal markets, yet many smaller practices cannot match the round-the-clock monitoring of big health systems.
Atlantic Digestive has not said how many people were affected. It joins a string of New England providers that took months to investigate before sending notices, a gap that regulators and plaintiffs’ attorneys tend to question.
