Breaches and incidents

Heritage Pediatrics (San Antonio, Texas): compromised email account sent fraudulent emails

HIPAA Journal reports the practice found fraudulent emails being sent from an employee’s account in April 2026 and confirmed a single account was compromised.

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • HIPAA Journal reports the practice found fraudulent emails being sent from an employee’s account in April 2026 and confirmed a single account was compromised; data may have included names, clinical, diagnosis and treatment information and medical record numbers. Patients were notified on or around 19 Oct 2026.
  • Root cause: single email account compromise; method not disclosed.
  • No attacker named; no misuse identified.
  • Notification issued; count not reported.