Cyber Incident Victim: Academic Urology & Urogynecology of Arizona
Date:
May 2025
Location:
United States of America
Summary
Academic Urology & Urogynecology of Arizona experienced a data breach after discovering an unauthorized intrusion into its computer network, which led to the determination that personal information including names, Social Security numbers, tax IDs, driver’s license or government ID numbers, birth dates, financial details, credit or debit card information, health insurance data, and limited medical records may have been accessed. Approximately seventy-three thousand two hundred eighty-one individuals were potentially affected, and a class action law firm is investigating claims on behalf of those impacted.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around May 22, 2025, Academic Urology & Urogynecology of Arizona identified an unauthorized intrusion into its computer network. The organization promptly initiated an investigation to determine the nature and extent of the incident. Through that investigation, it was determined that, from May 18 to May 22, 2025, an unauthorized third party may have accessed or obtained certain files stored on the network. The discovery date aligns with the timeframe when the intrusion was first detected.
The files that may have been accessed contained a range of personal information, including names, Social Security numbers, tax identification numbers, driver’s license or government ID numbers, birth dates, financial details, credit or debit card information, health insurance data, and limited medical records. Based on the assessment of the compromised files, approximately 73,281 individuals were identified as potentially affected by the breach. This figure represents the total number of individuals whose data may have been exposed during the identified window of unauthorized access.
Following the determination of the breach, Academic Urology engaged external legal counsel to address the incident and assess potential liability. Edelson Lechtzin LLP, a class action law firm based in suburban Philadelphia, announced that it is investigating claims on behalf of the individuals whose data may have been compromised. The firm stated that it is pursuing a class action lawsuit to seek legal remedies for those impacted. Contact information for the firm was provided in the public notice, including an address, phone number, and email address for inquiries.