On March 27, 2025, Georgia Urology (“GA Urology”) posted a website notice informing patients of a recent data breach involving two compromised employee email accounts. In this notice, Georgia Urology explains that the incident resulted in an unauthorized party being able to access patients’ sensitive information, including their names, addresses, Social Security numbers, driver’s license numbers, medical information, dates of birth, and health insurance information. Upon completing its investigation, GA Urology began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.
If you received a data breach notification from Georgia Urology, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Georgia Urology data breach. For more information, please see our recent piece on the topic here.
What Caused the Georgia Urology Data Breach?
The Georgia Urology data breach was only recently announced, and more information is expected in the near future. At this point, it doesn’t appear that GA Urology has filed official notice of the breach with the U.S. Department of Health and Human Services Office for Civil Rights or any state attorney general officers. However, Georgia Urology’s website notice provides some important information on what led up to the breach.
According to this source, on October 25, 2024, GA Urology detected suspicious activity within two employee email accounts. In response, GA Urology took steps to address the issue and then launched an investigation with the help of outside cybersecurity experts.
Through this investigation, GA Urology confirmed that the unauthorized party was able to access certain emails and attachments that contained confidential patient information.
After learning that sensitive patient data was accessible to an unauthorized party, Georgia Urology reviewed the compromised files to determine what information was leaked and which patients were impacted. GA Urology finished this process on March 5, 2025, and while the breached information varies depending on the individual, it may include your name, address, Social Security number, driver’s license number, medical information, date of birth, and health insurance information.
On March 27, 2025, Georgia Urology sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of what information belonging to them was compromised.
More Information About Georgia Urology
Georgia Urology is the largest urology practice in Atlanta and the Southeastern United States, providing comprehensive care for a wide range of urological conditions in men, women, and children. Headquartered in Atlanta, Georgia, the practice operates more than 30 offices and ambulatory surgery centers across the region and offers advanced treatment options in areas such as oncology, laparoscopy, infertility, incontinence, and pediatric urology. The organization employs approximately 572 people and generates an estimated $20 million in annual revenue.
