Act this weekWhat happenedCognitive Health Technologies, a New York health IT and consulting company, found an intruder in its network and says files with patient information were accessed and taken.
Who is affected49,467 patients whose records were held by the company, with exposed details including names, birth dates, health insurance information, medical histories and treatment information.
What to do- 1Read any notice letter you get from a health provider or this company, and keep it.
- 2Check your insurance explanation of benefits for visits or services you do not recognize.
- 3Ask your insurer to flag your account and report anything suspicious right away.
- 4Be wary of calls, texts or emails that mention your medical care and ask for money or personal details.
A New York health technology company says an intruder got into its network and took files containing patient information. Cognitive Health Technologies LLC reports that 49,467 people were affected. The outsider had access for almost three months before the activity was shut down.
What happened
The company spotted suspicious network activity on April 27, 2026. A forensic investigation, a detailed technical review of what happened, confirmed that an unauthorized third party had been in its network between February 5 and April 28, 2026. During that time, files and folders holding patient health information were accessed and taken.
The exposed details include names, dates of birth, health insurance information, medical histories and treatment information. That mix is useful to fraudsters. It can help someone bill an insurer in your name, or make a scam call sound believable.
Who it affects
Cognitive Health Technologies provides healthcare technology and IT consulting, so many patients may never have heard of it. The report does not say which providers or practices the affected records came from. It also does not say how the intruder got in.
The company says no misuse of the information has been identified. It says it has reviewed its security policies and added measures to prevent a repeat. Still, stolen records can be used later, so no misuse so far is not the same as no risk.
What to do
The steps are in the alert box above. The short version: keep any notice letter you receive, watch your insurance statements for care you did not get, and treat any call, text or email about your medical care with suspicion, especially one that asks for money or personal details.
The takeawayIf a notice letter about this breach reaches you, keep it and watch your insurance statements for care you did not receive.