Breaches and incidents
Tarter Krinsky & Drogin (Manhattan law firm): 2025 server breach exposed PHI of 196,645 patients of healthcare clients
TKD’s notice dated 4 Sep 2026 (filed with the California AG, posted 15 Sep 2026) says it found suspicious activity on 10 Sep 2025 and that there was...
- Disclosed
- Verification
- Checked against a primary source
What happened
- TKD’s notice dated 4 Sep 2026 (filed with the California AG, posted 15 Sep 2026) says it found suspicious activity on 10 Sep 2025 and that there was unauthorized access to “certain TKD servers at various times between July 9, 2025 and September 9, 2025”, with information “viewed or obtained”. HIPAA Journal (23 Oct 2026) reports 196,645 patients of its healthcare clients were affected, with medical, insurance, biometric data, SSNs and financial information among the types.
- Root cause: not disclosed.
- No attacker named.
- TKD notified federal law enforcement, added security measures and offers 12 months of monitoring.