Notice of Data Security Incident

Nephrology Associates, P.C. is notifying individuals of a data security incident involving certain patient and employee information.

On Sept. 8, 2026, Nephrology Associates discovered a ransomware incident involving unauthorized access to a server containing patient and employee information, including historical medical records.

Upon discovering the incident, we promptly took steps to secure our systems and engaged independent cybersecurity forensic specialists to investigate.

The investigation determined that files on the affected server were accessible to an unauthorized party. However, investigators found no evidence that information was removed from our network.

Ongoing monitoring has also found no indication that the information has been published or offered for sale. Our electronic health record system was not affected.

The information potentially involved varies by individual and may include names, health information, health insurance information, other payment information, Social Security numbers and other government-issued identification numbers.

We are mailing notification letters to affected individuals with additional information about the incident and steps they can take to protect their personal information. All affected individuals are being offered 24 months of complimentary Experian IdentityWorks credit monitoring and identity theft protection services.

We value the trust you place in Nephrology Associates and sincerely regret any concern or inconvenience this incident may cause. Thank you for your continued confidence and understanding. 

Questions or concerns?

Individuals with questions may contact the dedicated assistance line at 1-833-918-5105, Monday through Friday from 8:00 a.m. to 8:00 p.m. Central Time (excluding major U.S. holidays).