Summary

• Unauthorized access at vendors exposed names, government identification numbers, account details, health insurance data, and medical information.
• Healthcare incidents involving Rochester Regional Health and Duncan Regional Hospital centered on systems or services operated by external providers.
• Somerset Regal Bank said its own systems, customer accounts, and payment infrastructure were not affected, although vendor-held customer data may have been exposed.
• The Akira ransomware group claimed responsibility for the Rochester Philharmonic incident and alleged theft of personal and internal organizational documents.
• Affected organizations offered identity monitoring or related recovery services, while warning individuals about phishing, fraud, and identity theft.
• Rochester Regional Health’s vendor-issued notices contained an incorrect facility name, causing some patients to mistake legitimate breach notifications for scams.