New York Healthcare Tech Firm Breached, Potentially Exposing Medical Data of 49,467 People – Names, Birthdates and Insurance Info at Risk

A New York healthcare technology company has disclosed a data breach that exposed the medical information of nearly 50,000 people.

In its latest bulletin, the U.S. Department of Health and Human Services Office for Civil Rights says Cognitive Health Technologies suffered a hacking/IT incident impacting 49,467 individuals.

In a notice, Cognitive Health, which offers healthcare technology and IT consulting services, says it spotted suspicious activity on its network in late April of this year.

The firm also says the files taken include names, dates of birth, health insurance information, medical histories and treatment information.

“On April 27, 2026, Cognitive Health became aware of suspicious activity related to its network environment. We immediately took steps to secure our environment and launched an investigation to determine the nature and scope of the event. The investigation determined there was unauthorized access and/or acquisition of certain files and folders within Cognitive Health’s network between February 5, 2026, and April 28, 2026. As a result, Cognitive Health began an extensive review of these files and folders to determine whether sensitive information may be impacted. Our review determined that information related to certain individuals was present in the impacted data.”

The company says it has not found any misuse of the data so far.

It also says it has reviewed its security policies and added new measures to guard against similar attacks.

Cognitive Health urges impacted individuals to keep a close watch on incidents of identity theft and fraud, review account statements and monitor credit reports and explanation of benefits forms for suspicious activity.