Buffalo Surgery Center reports hacking affecting 64,000 individuals
Buffalo Surgery Center, a healthcare provider in New York, submitted a breach report to HHS OCR on 01/04/2025. The incident involved a hacking attack on a network server. This event impacted 64,000 individuals. The submission date marks when the report was filed, not when the breach occurred. Healthcare administrators in New York should review this filing for context on local security trends. This entry concerns a covered entity, not a business associate. Organizations should ensure their own incident response plans are current. No further details on the scope of data accessed are provided in this filing.
Sources differ:
- The HHS OCR record for Buffalo Surgery Center lists 64,000 individuals. Secondary reports (ClaimDepot, Becker's ASC) say Excelsior Orthopaedics separately reported 394,752 individuals for the same underlying incident and that both entities agreed to a $2.4 million class-action settlement.