Central New York Cardiology Data Breach Class Action to Proceed
August 3, 2026 – Federman & Sherwood announces that the New York State Supreme Court has denied, in large part, Central New York Cardiology, P.C.’s motion to dismiss the consolidated data breach class action arising from a December 2024 cyberattack that allegedly compromised patients’ sensitive personal and protected health information.
In its August 3, 2026 Decision and Order, the Court ruled that the plaintiffs sufficiently alleged standing to pursue their claims, finding that the complaint raised questions of fact regarding whether the data breach caused concrete injuries. The Court noted allegations that the compromised information included highly sensitive data such as names, addresses, dates of birth, driver’s license numbers, Social Security numbers, medical information, health insurance information, and financial account information. The Court also considered allegations that one plaintiff experienced unauthorized financial withdrawals following the breach, while both named plaintiffs reported increases in spam calls, emails, and text messages.
The Court allowed several key claims to proceed, including negligence, breach of implied contract, breach of confidence, and unjust enrichment. While the Court dismissed the plaintiffs’ claims for negligence per se, breach of fiduciary duty, and violation of New York General Business Law § 349, it otherwise denied the motion to dismiss, allowing the litigation to move forward toward discovery.
The underlying litigation stems from a cyberattack involving unauthorized access to Central New York Cardiology’s network between December 26 and December 30, 2024. According to the allegations, the incident potentially exposed patients’ personally identifiable information and protected health information, including Social Security numbers, medical diagnoses, treatment information, health insurance details, and financial account information.
Federman & Sherwood remains committed to representing individuals whose personal information has been compromised due to alleged failures to implement reasonable cybersecurity safeguards. The firm’s attorneys continue to advocate for accountability when organizations entrusted with sensitive information fail to adequately protect it.
For more information contact Federman & Sherwood.
Phone: 1-800-237-1277 | Email: info@federmanlaw.com