CSIDB logo
Organisation

Brookhaven ENT Allergy and Facial Surgery

Profile

Primary URL
Undetermined
Location
United States of America
Sector
Healthcare
Known incidents
1 incident
Updated
2026-09-06 09:58
Aliases
2 aliases

Organisation tracking is available to eligible accounts.

Profile narrative

Brookhaven ENT Allergy and Facial Surgery, also known as Brookhaven ENT, is a medical practice that provides ear, nose, throat allergy care and facial surgery services. It operates within the United States healthcare sector, serving patients who require specialized otolaryngologic and cosmetic surgical interventions. The practice focuses on diagnosing and treating allergic conditions affecting the upper airway, as well as performing reconstructive and aesthetic procedures of the face. As a healthcare provider, it is subject to federal privacy regulations such as HIPAA, which govern the handling of protected health information. Its clinical workflow relies on electronic health record systems to manage patient data and coordinate care. The organization contracts with third‑party vendors for health‑it solutions, including the CareCloud platform.

In March 2026, Brookhaven ENT notified 30,403 individuals that their personal and protected health information had been compromised in a cybersecurity incident involving its EHR provider, CareCloud. The exposed data included names, addresses, dates of birth, Social Security numbers, driver’s license or government ID numbers, financial account numbers, credit/debit card numbers, and medical and health insurance information. CareCloud reported the breach to the HHS Office for Civil Rights, indicating that the incident affected approximately 3.75 million individuals across its broader client base. At the time of notification, Brookhaven ENT stated that no actual or attempted misuse of the compromised data had been identified. This event highlights the practice’s reliance on external health‑it providers and the associated risks to patient information security. The breach notification underscores the organization’s compliance with breach‑reporting obligations under HIPAA.

Incidents

1 incident linked to this organisation.

CSIDB